last executing test programs: 4m30.071544032s ago: executing program 0 (id=1): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x10, 0x0, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m29.078108738s ago: executing program 0 (id=14): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readv(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$vcsn(0x0, 0x1, 0x1) write$UHID_INPUT(r5, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r7, r6, 0x0, 0x10001) 4m28.117386844s ago: executing program 0 (id=24): r0 = fsopen(&(0x7f0000002180)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1c6) getdents(r2, &(0x7f0000000780)=""/115, 0x73) getdents(r2, 0x0, 0x20) 4m27.997199865s ago: executing program 0 (id=25): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_nolock}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') 4m27.531942728s ago: executing program 0 (id=30): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m12.465847843s ago: executing program 32 (id=30): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m4.291919168s ago: executing program 1 (id=208): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1a) r1 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40047211, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x2401}) 4m4.156866199s ago: executing program 1 (id=211): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x51, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x29) sendmsg$can_j1939(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r6, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="060000000000a6389dd99d327599c3ae0000e96ff08952f8bf14a2730c5c0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f0000002800)='writeback_queue_io\x00', r10}, 0x18) r11 = dup2(r8, r8) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r11, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000002640)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "69dcaf2086ecba8545f45826cb1abe51ca73845d177dd8f1a7221faeccfda56b75cfe286fdd14cb5b11b1cab614fec223600", 0x11}, 0x48, 0xfffffffffffffffe) 4m3.205683094s ago: executing program 1 (id=219): mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x1000400, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2200c3a, 0x0) 4m3.161441724s ago: executing program 1 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x1}}}}}}}}}, 0x0) 4m3.089926905s ago: executing program 1 (id=221): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_nolock}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') 4m2.816147176s ago: executing program 1 (id=225): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000009cad0dfd65487100"/28], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8943, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) 3m47.644927779s ago: executing program 33 (id=225): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000009cad0dfd65487100"/28], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8943, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) 17.335472065s ago: executing program 6 (id=1887): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 17.039817246s ago: executing program 6 (id=1897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 15.986156362s ago: executing program 6 (id=1910): syz_open_procfs(0x0, &(0x7f0000000340)='net/snmp6\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 15.869217293s ago: executing program 6 (id=1913): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xfd, 0x120c, &(0x7f0000004500)="$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") r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6c, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x500, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, r0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 15.666339644s ago: executing program 6 (id=1919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) 15.461187755s ago: executing program 6 (id=1922): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d40)={0x0, @private}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e020000ac8000000000000000a4d1002406000496c8e3b5167347256fa4ac251a893d165b95c565667bfef6f5ee2fcb16bfd8c69bc4a41087d1c648d32f9a8b00d5d37cc67ea6e18fce536fcc6bcba9d44c", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0600"/15, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500000001000000050000000e00"/28], 0x50) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x5608, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x80001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x1f, &(0x7f0000000100), 0x120) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$setregs(0xd, r11, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r11, 0x200, &(0x7f00000000c0)={0x0, 0xfffffdc0}) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYRES8=r6, @ANYBLOB="296cc5f6caaeba88c9de1939d77021ae09308562264174413af7eea07b8d4500d9dcac5b1d59d8217343043075734151770d959a7e15572c91c4daad60256d33e3452dcae0f37a622f7f7d9741d5613455509c", @ANYRES64=r3, @ANYRESDEC=r4, @ANYRES16=r10, @ANYRES32=r8, @ANYRESOCT=r11, @ANYRES16=r1], 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x100201, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r12, 0x400, 0x300) r13 = socket$packet(0x11, 0xa, 0x300) setitimer(0x2, &(0x7f0000000e40)={{0x77359400}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, &(0x7f0000000240)={0x1, 0x6, 0x1, 0x5c, 0x1, [0x1, 0x80, 0x1, 0x7f]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000004c0)={r0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r14], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.460744834s ago: executing program 34 (id=1922): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d40)={0x0, @private}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e020000ac8000000000000000a4d1002406000496c8e3b5167347256fa4ac251a893d165b95c565667bfef6f5ee2fcb16bfd8c69bc4a41087d1c648d32f9a8b00d5d37cc67ea6e18fce536fcc6bcba9d44c", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0600"/15, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500000001000000050000000e00"/28], 0x50) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x5608, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x80001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x1f, &(0x7f0000000100), 0x120) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$setregs(0xd, r11, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r11, 0x200, &(0x7f00000000c0)={0x0, 0xfffffdc0}) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYRES8=r6, @ANYBLOB="296cc5f6caaeba88c9de1939d77021ae09308562264174413af7eea07b8d4500d9dcac5b1d59d8217343043075734151770d959a7e15572c91c4daad60256d33e3452dcae0f37a622f7f7d9741d5613455509c", @ANYRES64=r3, @ANYRESDEC=r4, @ANYRES16=r10, @ANYRES32=r8, @ANYRESOCT=r11, @ANYRES16=r1], 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x100201, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r12, 0x400, 0x300) r13 = socket$packet(0x11, 0xa, 0x300) setitimer(0x2, &(0x7f0000000e40)={{0x77359400}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, &(0x7f0000000240)={0x1, 0x6, 0x1, 0x5c, 0x1, [0x1, 0x80, 0x1, 0x7f]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000004c0)={r0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r14], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.109566478s ago: executing program 4 (id=2127): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='ext4_allocate_blocks\x00', r0, 0x0, 0x4}, 0x18) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x800, 0xa4018, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x624440, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x7, 0x8, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0x24}, @map_fd={0x18, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x2, 0x2, 0x0, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2485}], &(0x7f0000000580)='syzkaller\x00', 0x3, 0x78, &(0x7f00000005c0)=""/120, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000f00)=[0xffffffffffffffff, r4, r5, r1, r6, 0xffffffffffffffff], 0x0, 0x10, 0x2, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000005f700000000000000000000000000000000e000516f71b95478169ccb9489fcdf6d7defdf59331e9986aafc049ca935547b7503aa81dfae68ccd319924bd369e55b7c0d2073a0b8e79eccbf7d46c01869090500dbad2d109c0f69a0df786be7b48daf5361380d8738636f2a16e36fd830e8558d226650fad5f30a721be66f026e1235", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0', 0x1, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ee, &(0x7f0000000880)="$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") 1.556303551s ago: executing program 4 (id=2136): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.512003412s ago: executing program 4 (id=2138): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000140), 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x23bb, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (fail_nth: 2) 1.224245583s ago: executing program 7 (id=2142): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) r1 = syz_socket_connect_nvme_tcp() close(r1) r2 = socket(0x1, 0x3, 0x1) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7d, &(0x7f00000002c0)=@sack_info={r4, 0x7, 0x8}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000007000000080000006a0e000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff0f00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000c57d5cdfb326e011110000ff0300000000000085fcc22825603c5cfdeebbd6bb5495ff4d", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x81, 0x0, &(0x7f00000010c0)=0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000987dbfd9d273c4629647aebb0b4bdd0891f63784cde010952975a8c69dcd187025ce02adcf26c31e248567059bb50e9307033c71234f260ba35dc4f74446087e", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x68802, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r9 = creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r9, 0xffffffff80000700, 0x0, &(0x7f00000008c0)) 1.102232453s ago: executing program 4 (id=2146): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 1.033753724s ago: executing program 5 (id=2147): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d40)={0x0, @private}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e020000ac8000000000000000a4d1002406000496c8e3b5167347256fa4ac251a893d165b95c565667bfef6f5ee2fcb16bfd8c69bc4a41087d1c648d32f9a8b00d5d37cc67ea6e18fce536fcc6bcba9d44c", @ANYRES32, @ANYBLOB="0600"/15, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500000001000000050000000e00"/28], 0x50) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x5608, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0xa, 0x300) setitimer(0x2, &(0x7f0000000e40)={{0x77359400}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.032502504s ago: executing program 5 (id=2148): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async, rerun: 64) process_vm_writev(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e0"], 0x78}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x19, 0x6}]}, 0x10) fallocate(r5, 0x24, 0x9, 0x8000000000000000) 1.022851774s ago: executing program 3 (id=2149): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 1.004220864s ago: executing program 7 (id=2150): fcntl$notify(0xffffffffffffffff, 0x402, 0x29) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe89) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 961.797284ms ago: executing program 5 (id=2151): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xa3331ddc6211143) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe89) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) 961.518314ms ago: executing program 3 (id=2152): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) acct(&(0x7f0000000200)='./file1\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 961.080594ms ago: executing program 5 (id=2153): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES16=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d00)='sched_switch\x00', r2, 0x0, 0x1ef}, 0x18) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000100)={[{@i_version}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000dc0)='snd_soc_dapm_path\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) 845.236505ms ago: executing program 3 (id=2154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 817.523085ms ago: executing program 3 (id=2155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 808.568345ms ago: executing program 7 (id=2156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0xe) mount$9p_tcp(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e21}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32, @ANYBLOB="600000000040000008000300", @ANYRES32], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 765.703816ms ago: executing program 3 (id=2157): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) r1 = syz_socket_connect_nvme_tcp() close(r1) r2 = socket(0x1, 0x3, 0x1) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7d, &(0x7f00000002c0)=@sack_info={r4, 0x7, 0x8}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000007000000080000006a0e000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff0f00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000c57d5cdfb326e011110000ff0300000000000085fcc22825603c5cfdeebbd6bb5495ff4d", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x81, 0x0, &(0x7f00000010c0)=0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000987dbfd9d273c4629647aebb0b4bdd0891f63784cde010952975a8c69dcd187025ce02adcf26c31e248567059bb50e9307033c71234f260ba35dc4f74446087e", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x68802, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, &(0x7f00000008c0)) 648.275706ms ago: executing program 2 (id=2158): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910910000000000c300200100ed00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) 607.242266ms ago: executing program 2 (id=2159): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='ext4_allocate_blocks\x00', r0, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x800, 0xa4018, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ee, &(0x7f0000000880)="$eJzs3cFuG1sZAOB/Jja3SXNxLrC4XInbihYlFdRJGtpGLApICFaVgLIvIXGjKE5cJU7bRBWk4gGQEAIkNrBig8QDIKE+AkKqBHsECFRBCwsWhUG2xyFN7SSljg3x90mnc8547P/8tXw8Z2biCWBonY+IqYjIsiy7FBGlfH2al9htlcZ2z589XGyUJLLs1l+SSPJ17dd6K1+ezZ92JiK++qWIbySvxt3c3lldqFYrG3l7ur6WvMiyncsrawvLleXK+tzc7LX56/NX52d6kudERNz4wh+//52ffvHGLz91/3e3/zz1zVaCLfvz6KVW6sXm/0VbISI2TiLYgBSaGbZcHXBfAAA4XGN//0MR8fGIuBSlGGnuzQEAAACnSfbZ8XiRtM7/AQAAAKdTGhHjkaTl/Hrf8UjTcrl1De9HYiyt1jbrn8xKe8cLJqKY3lmpVmbyawcmopg02rP5Nbbt9pUD7bmIeCcivlcabbbLi7Xq0kCPfAAAAMDwOHtg/v/3Umv+DwAAAJwyE4PuAAAAAHDizP8BAADg9DP/BwAAgFPtyzdvNkrWvv/10r3trdXavctLlc3V8trWYnmxtnG3vFyrLTd/s2/tqNer1mp3Px3rWw+m65XN+vTm9s7ttdrWev32yku3wAYAAAD66J1zj3+bRMTuZ0bTiMiSfY8VI7KR/RsX+t8/4OSkr7PxH06uH0D/jQy6A8DA2KWH4VUcdAeAgTtqHOh68c6vet8XAADgZEx+dO/8f7MAw+Px0+YiSQbdEaDvnP+H4eX8Hwyv4mF7ACYFcOqlh3zU238Q9Obn/7Ps9XsGAAD00nizJGk5nweMR5qWyxFvN28LUEzurFQrMxHxwYj4Tan4VqM923xm4vAAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWRdTG6tw0AAADw/ywi/VOS3/9rsnRx/ODxgQ8k/yg1lxFx/0e3fvBgoV7fmG2s/+ve+voP8/VX+n30AgAAAOikPU9vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJeeP3u42C79jPv08xEx0Sl+Ic40l2eiGBFjf0uisO95SUSM9CD+7lhEvNspftLoVkzkvTgYP42I0V7Ef/Tfxz/bg/gwzB43xp/Pdfr8pXG+uez8+Svk5U11H//SvfFvpMv493anF0xfXfXek59Pd43/KOK9Qufxpx0/6RL/wjFz/PrXdna6PZb9JGKy4/dP8lKs6aRwd3pze+fyytrCcmW5sj43N3tt/vr81fmZ6Tsr1Ur+b8cY3/3YL/51WP5jXeJPHJH/xWPm/88nD559uFUtHnioGD/OsqkLnd//d7vEb3/3fSJ/uxvtyXZ9t1Xf7/2f/fr9c4fkv9Ql/6Pe/6lj5n/pK9/+/TE3BQD6YHN7Z3WhWq1sqKicWGU0+hh0IQ7bpr0T24f+fCsP9T/xFrx2ZYCDEgAAcCL+s9M/6J4AAAAAAAAAAAAAAAAAAADA8DrqZ8CiBz8ndjDm7mBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA41L8DAAD//y7szXE=") 606.854197ms ago: executing program 3 (id=2160): truncate(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0xf, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe000000}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x18, &(0x7f00000002c0)=""/24, 0x41100, 0xa, '\x00', r0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000015c0)=[r4, r5], &(0x7f0000001600)=[{0x0, 0x3, 0x4, 0x9}, {0x5, 0x2, 0x2, 0x3}, {0x5, 0x3, 0x7, 0x4}, {0x0, 0x1, 0xb, 0x4}], 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r6 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) inotify_init1(0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x18}, @union={0x0, 0x0, 0x0, 0x5, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="b5430000f5ffffffffff33"], 0x34}}, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x3f, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) setrlimit(0x8, 0x0) mlockall(0x7) r11 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x28081) ioctl$USBDEVFS_CLAIM_PORT(r11, 0x80045518, &(0x7f0000000000)) 572.230136ms ago: executing program 7 (id=2161): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) r1 = syz_socket_connect_nvme_tcp() close(r1) r2 = socket(0x1, 0x3, 0x1) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7d, &(0x7f00000002c0)=@sack_info={r4, 0x7, 0x8}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000007000000080000006a0e000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff0f00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000c57d5cdfb326e011110000ff0300000000000085fcc22825603c5cfdeebbd6bb5495ff4d", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x81, 0x0, &(0x7f00000010c0)=0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000987dbfd9d273c4629647aebb0b4bdd0891f63784cde010952975a8c69dcd187025ce02adcf26c31e248567059bb50e9307033c71234f260ba35dc4f74446087e", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x68802, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, &(0x7f00000008c0)) 412.488698ms ago: executing program 2 (id=2162): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d40)={0x0, @private}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e020000ac8000000000000000a4d1002406000496c8e3b5167347256fa4ac251a893d165b95c565667bfef6f5ee2fcb16bfd8c69bc4a41087d1c648d32f9a8b00d5d37cc67ea6e18fce536fcc6bcba9d44c", @ANYRES32, @ANYBLOB="0600"/15, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500000001000000050000000e00"/28], 0x50) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) write$qrtrtun(r3, &(0x7f0000001300)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3d2b94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x5608, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x7e, 0x11, &(0x7f0000000300)="de92c3dc7a60157c5ed568be0346110aa9ffc7eab3e8d06c4488f80241f4642b16312dff50d34b6066695c85927244b8c594bb623823636d58f1bca6e0dbce4bb35f263d4bd3adc18027dee42fa9e541182d4ee8d28923d37282279b20bfc875358a0a64fd9a955306ad39f833e70084927bae1f2abdb223215a8ada6216", &(0x7f0000000000)=""/17, 0x4, 0x0, 0x64, 0x3b, &(0x7f0000000380)="63fa56c31e797952fb0237bad19417539c240c84613d4771ef2b785532fbbf696ae01b89434339a12228f73c553a3bbd18806b9c72e09032ecfe2d093bd0a6ab2db7fb93dceb62b5f4451a182bf8b17942d00edda6ca12e62c418be815822d589c1d8c81", &(0x7f0000000240)="d379eae98fb31abd3d608e53aaf9428139ae968acc339fbacf97d40fe0de371abeb58d160183de0ebe9aa8de9ce850791e9b19507ee240eb954e28", 0x4, 0x0, 0x3c55}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) setitimer(0x2, &(0x7f0000000e40)={{0x77359400}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 277.777868ms ago: executing program 2 (id=2163): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xa3331ddc6211143) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe89) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) 277.594168ms ago: executing program 2 (id=2164): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) acct(&(0x7f0000000200)='./file1\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 277.031818ms ago: executing program 5 (id=2165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 260.561739ms ago: executing program 7 (id=2166): fcntl$notify(0xffffffffffffffff, 0x402, 0x29) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe89) futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 188.362909ms ago: executing program 4 (id=2167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 172.471669ms ago: executing program 4 (id=2168): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file1\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 85.347459ms ago: executing program 7 (id=2169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'rose0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x49d1f586de5c007a, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0xc4, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c25cccab5b81b0b46070000000000002100df44ffffffffff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mq_getsetattr(r6, 0x0, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000540)=0x210200, 0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='\\', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x10, 0x0, 0x22}, 0x10) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='rpc_xdr_alignment\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f00000003c0), 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r10) 71.628749ms ago: executing program 2 (id=2170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001040)}, 0x1246, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000001000)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 0s ago: executing program 5 (id=2171): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) r1 = syz_socket_connect_nvme_tcp() close(r1) r2 = socket(0x1, 0x3, 0x1) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7d, &(0x7f00000002c0)=@sack_info={r4, 0x7, 0x8}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000007000000080000006a0e000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff0f00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000c57d5cdfb326e011110000ff0300000000000085fcc22825603c5cfdeebbd6bb5495ff4d", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x81, 0x0, &(0x7f00000010c0)=0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000987dbfd9d273c4629647aebb0b4bdd0891f63784cde010952975a8c69dcd187025ce02adcf26c31e248567059bb50e9307033c71234f260ba35dc4f74446087e", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x68802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, &(0x7f00000008c0)) kernel console output (not intermixed with test programs): en left with an inconsistent configuration, please check. [ 265.083021][ T9479] loop2: detected capacity change from 0 to 1024 [ 265.120396][ T9483] loop6: detected capacity change from 0 to 512 [ 265.144115][ T9479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.181147][ T9483] EXT4-fs: inline encryption not supported [ 265.244078][ T9483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.305957][ T9483] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.375458][ T9483] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1633: corrupted inode contents [ 265.438346][ T9483] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.1633: mark_inode_dirty error [ 265.513225][ T9483] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1633: corrupted inode contents [ 265.565286][ T9483] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1633: mark_inode_dirty error [ 265.625150][ T9495] EXT4-fs (loop2): shut down requested (0) [ 265.701731][ T9497] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1636'. [ 265.736244][ T4664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.745034][ T9497] 1ªX¹¦À: renamed from 60ªX¹¦À [ 265.751483][ T9497] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 265.826889][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.862350][ T9502] loop6: detected capacity change from 0 to 512 [ 265.897983][ T9502] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 265.966353][ T9502] EXT4-fs (loop6): 1 truncate cleaned up [ 265.975295][ T9502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.084121][ T4664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.142500][ T9517] loop6: detected capacity change from 0 to 1024 [ 266.152593][ T9518] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1642'. [ 266.189076][ T9517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.213462][ T9518] 0ªX¹¦À: renamed from 61ªX¹¦À [ 266.258355][ T9518] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 266.650152][ T4664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.741890][ T9550] Illegal XDP return value 4294967274 on prog (id 891) dev N/A, expect packet loss! [ 266.873648][ T9563] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1659'. [ 266.906080][ T9563] 0ªX¹¦À: renamed from 61ªX¹¦À [ 266.928641][ T9563] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 266.977406][ T9571] loop2: detected capacity change from 0 to 1024 [ 267.012832][ T9571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.101032][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.156779][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.165841][ T9571] EXT4-fs (loop2): shut down requested (0) [ 267.186215][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.195058][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.212022][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.313038][ T9567] loop5: detected capacity change from 0 to 1024 [ 267.325329][ T9567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.340546][ T9575] capability: warning: `syz.2.1662' uses 32-bit capabilities (legacy support in use) [ 267.355947][ T9567] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 267.397321][ T9567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.458720][ T9567] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 267.479611][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1658'. [ 267.506966][ T9579] loop2: detected capacity change from 0 to 1024 [ 267.645613][ T9579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.705663][ T9588] FAULT_INJECTION: forcing a failure. [ 267.705663][ T9588] name failslab, interval 1, probability 0, space 0, times 1 [ 267.718378][ T9588] CPU: 1 UID: 0 PID: 9588 Comm: syz.3.1665 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 267.728729][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.738819][ T9588] Call Trace: [ 267.742182][ T9588] [ 267.745110][ T9588] dump_stack_lvl+0xf2/0x150 [ 267.749710][ T9588] dump_stack+0x15/0x20 [ 267.753960][ T9588] should_fail_ex+0x223/0x230 [ 267.758653][ T9588] should_failslab+0x8f/0xb0 [ 267.763313][ T9588] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 267.769105][ T9588] ? sock_alloc_inode+0x34/0xa0 [ 267.773991][ T9588] sock_alloc_inode+0x34/0xa0 [ 267.778695][ T9588] ? __pfx_sock_alloc_inode+0x10/0x10 [ 267.784079][ T9588] alloc_inode+0x3c/0x160 [ 267.788482][ T9588] new_inode_pseudo+0x15/0x20 [ 267.793172][ T9588] __sock_create+0x12b/0x5a0 [ 267.797847][ T9588] __sys_socket+0xae/0x240 [ 267.802271][ T9588] __x64_sys_socket+0x3f/0x50 [ 267.806956][ T9588] x64_sys_call+0x2cf2/0x2dc0 [ 267.811719][ T9588] do_syscall_64+0xc9/0x1c0 [ 267.816237][ T9588] ? clear_bhb_loop+0x55/0xb0 [ 267.820985][ T9588] ? clear_bhb_loop+0x55/0xb0 [ 267.825773][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.831684][ T9588] RIP: 0033:0x7ff9193e0849 [ 267.836104][ T9588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.855750][ T9588] RSP: 002b:00007ff917a57058 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 267.864182][ T9588] RAX: ffffffffffffffda RBX: 00007ff9195a5fa0 RCX: 00007ff9193e0849 [ 267.872163][ T9588] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 267.880142][ T9588] RBP: 00007ff917a570a0 R08: 0000000000000000 R09: 0000000000000000 [ 267.888124][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.896104][ T9588] R13: 0000000000000001 R14: 00007ff9195a5fa0 R15: 00007fff71dd12d8 [ 267.904163][ T9588] [ 267.907285][ T9588] socket: no more sockets [ 267.923050][ T9593] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1667'. [ 268.041623][ T9603] loop4: detected capacity change from 0 to 128 [ 268.075388][ T9601] FAULT_INJECTION: forcing a failure. [ 268.075388][ T9601] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 268.088612][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.3.1670 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 268.098948][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.109007][ T9601] Call Trace: [ 268.112280][ T9601] [ 268.115200][ T9601] dump_stack_lvl+0xf2/0x150 [ 268.119869][ T9601] dump_stack+0x15/0x20 [ 268.124022][ T9601] should_fail_ex+0x223/0x230 [ 268.128757][ T9601] should_fail+0xb/0x10 [ 268.132912][ T9601] should_fail_usercopy+0x1a/0x20 [ 268.138016][ T9601] _copy_from_user+0x1e/0xb0 [ 268.142646][ T9601] copy_msghdr_from_user+0x54/0x2a0 [ 268.147845][ T9601] ? __fget_files+0x17c/0x1c0 [ 268.152585][ T9601] __sys_sendmsg+0x13e/0x230 [ 268.157218][ T9601] __x64_sys_sendmsg+0x46/0x50 [ 268.161973][ T9601] x64_sys_call+0x2734/0x2dc0 [ 268.166648][ T9601] do_syscall_64+0xc9/0x1c0 [ 268.171172][ T9601] ? clear_bhb_loop+0x55/0xb0 [ 268.175855][ T9601] ? clear_bhb_loop+0x55/0xb0 [ 268.180544][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.186532][ T9601] RIP: 0033:0x7ff9193e0849 [ 268.190947][ T9601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.210799][ T9601] RSP: 002b:00007ff917a57058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.219293][ T9601] RAX: ffffffffffffffda RBX: 00007ff9195a5fa0 RCX: 00007ff9193e0849 [ 268.227324][ T9601] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 268.235317][ T9601] RBP: 00007ff917a570a0 R08: 0000000000000000 R09: 0000000000000000 [ 268.243304][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.251380][ T9601] R13: 0000000000000000 R14: 00007ff9195a5fa0 R15: 00007fff71dd12d8 [ 268.259415][ T9601] [ 268.275446][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 268.275460][ T29] audit: type=1326 audit(1732985704.379:29800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01719777e7 code=0x7ffc0000 [ 268.305525][ T29] audit: type=1326 audit(1732985704.379:29801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f017191c189 code=0x7ffc0000 [ 268.328939][ T29] audit: type=1326 audit(1732985704.379:29802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0171980849 code=0x7ffc0000 [ 268.374129][ T29] audit: type=1326 audit(1732985704.469:29803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01719777e7 code=0x7ffc0000 [ 268.397664][ T29] audit: type=1326 audit(1732985704.469:29804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f017191c189 code=0x7ffc0000 [ 268.421076][ T29] audit: type=1326 audit(1732985704.469:29805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0171980849 code=0x7ffc0000 [ 268.444677][ T29] audit: type=1326 audit(1732985704.469:29806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01719777e7 code=0x7ffc0000 [ 268.468078][ T29] audit: type=1326 audit(1732985704.469:29807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f017191c189 code=0x7ffc0000 [ 268.491528][ T29] audit: type=1326 audit(1732985704.469:29808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0171980849 code=0x7ffc0000 [ 268.515893][ T29] audit: type=1326 audit(1732985704.509:29809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01719777e7 code=0x7ffc0000 [ 268.541947][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.551493][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.581796][ T9607] loop2: detected capacity change from 0 to 1024 [ 268.637879][ T9607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.665942][ T9613] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1675'. [ 268.683159][ T9613] 0ªX¹¦À: renamed from 61ªX¹¦À [ 268.694972][ T9613] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 268.703612][ T9623] loop5: detected capacity change from 0 to 512 [ 268.734541][ T9607] EXT4-fs (loop2): shut down requested (0) [ 268.750594][ T9623] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 268.762692][ T9629] loop3: detected capacity change from 0 to 1024 [ 268.781218][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.794217][ T9629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.796244][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1680'. [ 268.889353][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.899620][ T9635] rdma_op ffff88811b617980 conn xmit_rdma 0000000000000000 [ 269.118913][ T9653] FAULT_INJECTION: forcing a failure. [ 269.118913][ T9653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.132112][ T9653] CPU: 1 UID: 0 PID: 9653 Comm: syz.2.1692 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 269.142452][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.152519][ T9653] Call Trace: [ 269.155832][ T9653] [ 269.158814][ T9653] dump_stack_lvl+0xf2/0x150 [ 269.163441][ T9653] dump_stack+0x15/0x20 [ 269.167613][ T9653] should_fail_ex+0x223/0x230 [ 269.172331][ T9653] should_fail+0xb/0x10 [ 269.176511][ T9653] should_fail_usercopy+0x1a/0x20 [ 269.181628][ T9653] _copy_to_user+0x20/0xa0 [ 269.186058][ T9653] simple_read_from_buffer+0xa0/0x110 [ 269.191478][ T9653] proc_fail_nth_read+0xf9/0x140 [ 269.196436][ T9653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.202032][ T9653] vfs_read+0x1a2/0x700 [ 269.206268][ T9653] ? __rcu_read_unlock+0x4e/0x70 [ 269.211279][ T9653] ? __fget_files+0x17c/0x1c0 [ 269.215981][ T9653] ksys_read+0xe8/0x1b0 [ 269.220158][ T9653] __x64_sys_read+0x42/0x50 [ 269.224670][ T9653] x64_sys_call+0x2874/0x2dc0 [ 269.229399][ T9653] do_syscall_64+0xc9/0x1c0 [ 269.233917][ T9653] ? clear_bhb_loop+0x55/0xb0 [ 269.238686][ T9653] ? clear_bhb_loop+0x55/0xb0 [ 269.243426][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.249383][ T9653] RIP: 0033:0x7f149937f25c [ 269.253876][ T9653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 269.273504][ T9653] RSP: 002b:00007f14979f7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.281978][ T9653] RAX: ffffffffffffffda RBX: 00007f1499545fa0 RCX: 00007f149937f25c [ 269.289953][ T9653] RDX: 000000000000000f RSI: 00007f14979f70b0 RDI: 0000000000000003 [ 269.297928][ T9653] RBP: 00007f14979f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 269.305965][ T9653] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 269.313949][ T9653] R13: 0000000000000000 R14: 00007f1499545fa0 R15: 00007ffd51d1c0d8 [ 269.322057][ T9653] [ 269.434443][ T9660] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1695'. [ 269.499414][ T9662] loop3: detected capacity change from 0 to 1024 [ 269.525494][ T9662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.571231][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.624355][ T9667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.646763][ T9667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.682609][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 270.144826][ T9689] loop4: detected capacity change from 0 to 512 [ 270.205534][ T9689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.237718][ T9689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.272452][ T9689] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.412382][ T9697] __nla_validate_parse: 3 callbacks suppressed [ 270.412399][ T9697] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1708'. [ 270.444954][ T9697] 1ªX¹¦À: renamed from 60ªX¹¦À [ 270.462634][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1711'. [ 270.471848][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1711'. [ 270.488784][ T9697] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 270.714794][ T9716] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 270.731484][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.731630][ T9715] FAULT_INJECTION: forcing a failure. [ 270.731630][ T9715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.753654][ T9715] CPU: 0 UID: 0 PID: 9715 Comm: syz.5.1714 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 270.764034][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.774098][ T9715] Call Trace: [ 270.777428][ T9715] [ 270.780412][ T9715] dump_stack_lvl+0xf2/0x150 [ 270.785109][ T9715] dump_stack+0x15/0x20 [ 270.789279][ T9715] should_fail_ex+0x223/0x230 [ 270.794021][ T9715] should_fail+0xb/0x10 [ 270.798170][ T9715] should_fail_usercopy+0x1a/0x20 [ 270.803180][ T9715] _copy_from_user+0x1e/0xb0 [ 270.807882][ T9715] perf_copy_attr+0x146/0x5c0 [ 270.812553][ T9715] ? selinux_file_permission+0x22a/0x360 [ 270.818260][ T9715] ? __rcu_read_unlock+0x4e/0x70 [ 270.823237][ T9715] __se_sys_perf_event_open+0x6d/0x2230 [ 270.828771][ T9715] ? proc_fail_nth_write+0x12a/0x150 [ 270.834042][ T9715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 270.839701][ T9715] ? vfs_write+0x596/0x920 [ 270.844146][ T9715] __x64_sys_perf_event_open+0x67/0x80 [ 270.849628][ T9715] x64_sys_call+0x1deb/0x2dc0 [ 270.854416][ T9715] do_syscall_64+0xc9/0x1c0 [ 270.858975][ T9715] ? clear_bhb_loop+0x55/0xb0 [ 270.863645][ T9715] ? clear_bhb_loop+0x55/0xb0 [ 270.868309][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.874257][ T9715] RIP: 0033:0x7f45e3540849 [ 270.878666][ T9715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.898326][ T9715] RSP: 002b:00007f45e1bb7058 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 270.906727][ T9715] RAX: ffffffffffffffda RBX: 00007f45e3705fa0 RCX: 00007f45e3540849 [ 270.914691][ T9715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 270.922659][ T9715] RBP: 00007f45e1bb70a0 R08: 000000000000000d R09: 0000000000000000 [ 270.930630][ T9715] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 270.938595][ T9715] R13: 0000000000000000 R14: 00007f45e3705fa0 R15: 00007ffcdb8914b8 [ 270.946560][ T9715] [ 270.974371][ T9715] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 271.034458][ T9725] loop4: detected capacity change from 0 to 1024 [ 271.073602][ T9725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.089715][ T9731] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1722'. [ 271.100847][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.160066][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 271.169155][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1723'. [ 271.220629][ T9738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.243388][ T9738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.274090][ T9738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.284728][ T9738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.293241][ T9742] FAULT_INJECTION: forcing a failure. [ 271.293241][ T9742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.300696][ T9738] netlink: 'syz.5.1725': attribute type 21 has an invalid length. [ 271.306385][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.4.1727 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 271.306409][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.334594][ T9742] Call Trace: [ 271.337874][ T9742] [ 271.340795][ T9742] dump_stack_lvl+0xf2/0x150 [ 271.345487][ T9742] dump_stack+0x15/0x20 [ 271.349686][ T9742] should_fail_ex+0x223/0x230 [ 271.354388][ T9742] should_fail+0xb/0x10 [ 271.358538][ T9742] should_fail_usercopy+0x1a/0x20 [ 271.363593][ T9742] _copy_from_user+0x1e/0xb0 [ 271.368173][ T9742] copy_msghdr_from_user+0x54/0x2a0 [ 271.373370][ T9742] ? __fget_files+0x17c/0x1c0 [ 271.378039][ T9742] __sys_sendmmsg+0x1e8/0x4b0 [ 271.382779][ T9742] __x64_sys_sendmmsg+0x57/0x70 [ 271.387698][ T9742] x64_sys_call+0x29aa/0x2dc0 [ 271.392445][ T9742] do_syscall_64+0xc9/0x1c0 [ 271.396959][ T9742] ? clear_bhb_loop+0x55/0xb0 [ 271.401628][ T9742] ? clear_bhb_loop+0x55/0xb0 [ 271.406299][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.412183][ T9742] RIP: 0033:0x7efc6c0b0849 [ 271.416585][ T9742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.436192][ T9742] RSP: 002b:00007efc6a727058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.444610][ T9742] RAX: ffffffffffffffda RBX: 00007efc6c275fa0 RCX: 00007efc6c0b0849 [ 271.452583][ T9742] RDX: 0000000000000001 RSI: 0000000020000ec0 RDI: 0000000000000003 [ 271.460575][ T9742] RBP: 00007efc6a7270a0 R08: 0000000000000000 R09: 0000000000000000 [ 271.468538][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.476605][ T9742] R13: 0000000000000000 R14: 00007efc6c275fa0 R15: 00007ffe84feada8 [ 271.484587][ T9742] [ 271.532851][ T9747] FAULT_INJECTION: forcing a failure. [ 271.532851][ T9747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.546085][ T9747] CPU: 1 UID: 0 PID: 9747 Comm: syz.3.1730 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 271.556428][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.566482][ T9747] Call Trace: [ 271.569761][ T9747] [ 271.572717][ T9747] dump_stack_lvl+0xf2/0x150 [ 271.577429][ T9747] dump_stack+0x15/0x20 [ 271.581593][ T9747] should_fail_ex+0x223/0x230 [ 271.586412][ T9747] should_fail+0xb/0x10 [ 271.590589][ T9747] should_fail_usercopy+0x1a/0x20 [ 271.595682][ T9747] _copy_from_user+0x1e/0xb0 [ 271.600275][ T9747] __x64_sys_epoll_ctl+0x8e/0xf0 [ 271.605220][ T9747] x64_sys_call+0x1361/0x2dc0 [ 271.609912][ T9747] do_syscall_64+0xc9/0x1c0 [ 271.614429][ T9747] ? clear_bhb_loop+0x55/0xb0 [ 271.619163][ T9747] ? clear_bhb_loop+0x55/0xb0 [ 271.624012][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.629935][ T9747] RIP: 0033:0x7ff9193e0849 [ 271.634384][ T9747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.654065][ T9747] RSP: 002b:00007ff917a57058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 271.662506][ T9747] RAX: ffffffffffffffda RBX: 00007ff9195a5fa0 RCX: 00007ff9193e0849 [ 271.670473][ T9747] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000003 [ 271.678449][ T9747] RBP: 00007ff917a570a0 R08: 0000000000000000 R09: 0000000000000000 [ 271.686422][ T9747] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 271.694389][ T9747] R13: 0000000000000000 R14: 00007ff9195a5fa0 R15: 00007fff71dd12d8 [ 271.702365][ T9747] [ 271.719706][ T9749] loop4: detected capacity change from 0 to 1024 [ 271.726776][ T9749] EXT4-fs: Ignoring removed nobh option [ 271.732355][ T9749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.745259][ T9749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.772986][ T9749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.806409][ T9757] random: crng reseeded on system resumption [ 271.812528][ T9749] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 271.902307][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.080983][ T9763] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1735'. [ 272.103590][ T9763] 1ªX¹¦À: renamed from 60ªX¹¦À [ 272.115736][ T9763] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 272.188003][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1740'. [ 272.197170][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1740'. [ 272.216238][ T9771] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1738'. [ 272.230758][ T9771] 1ªX¹¦À: renamed from 60ªX¹¦À [ 272.260798][ T9771] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 272.562104][ T9792] loop6: detected capacity change from 0 to 512 [ 272.580216][ T9792] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 272.603417][ T9792] EXT4-fs (loop6): 1 truncate cleaned up [ 272.610660][ T9792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.660520][ T9780] mmap: syz.5.1742 (9780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.801013][ T9800] FAULT_INJECTION: forcing a failure. [ 272.801013][ T9800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.814216][ T9800] CPU: 0 UID: 0 PID: 9800 Comm: syz.3.1749 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 272.824565][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.834643][ T9800] Call Trace: [ 272.837928][ T9800] [ 272.840866][ T9800] dump_stack_lvl+0xf2/0x150 [ 272.845487][ T9800] dump_stack+0x15/0x20 [ 272.849667][ T9800] should_fail_ex+0x223/0x230 [ 272.854334][ T9800] should_fail+0xb/0x10 [ 272.858522][ T9800] should_fail_usercopy+0x1a/0x20 [ 272.863581][ T9800] _copy_from_user+0x1e/0xb0 [ 272.868159][ T9800] get_timespec64+0x49/0x140 [ 272.872859][ T9800] __x64_sys_mq_timedreceive+0x92/0x150 [ 272.878492][ T9800] x64_sys_call+0x18f1/0x2dc0 [ 272.883179][ T9800] do_syscall_64+0xc9/0x1c0 [ 272.887667][ T9800] ? clear_bhb_loop+0x55/0xb0 [ 272.892349][ T9800] ? clear_bhb_loop+0x55/0xb0 [ 272.897225][ T9800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.903111][ T9800] RIP: 0033:0x7ff9193e0849 [ 272.907508][ T9800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.927163][ T9800] RSP: 002b:00007ff917a57058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 272.935582][ T9800] RAX: ffffffffffffffda RBX: 00007ff9195a5fa0 RCX: 00007ff9193e0849 [ 272.943578][ T9800] RDX: 9b0c4f391059f39b RSI: 0000000020000000 RDI: 0000000000000004 [ 272.951543][ T9800] RBP: 00007ff917a570a0 R08: 0000000020000100 R09: 0000000000000000 [ 272.959556][ T9800] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.967607][ T9800] R13: 0000000000000000 R14: 00007ff9195a5fa0 R15: 00007fff71dd12d8 [ 272.975579][ T9800] [ 273.111222][ T9814] loop5: detected capacity change from 0 to 512 [ 273.121441][ T9813] 9pnet_fd: Insufficient options for proto=fd [ 273.147388][ T9814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.189503][ T9814] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.231603][ T9814] Process accounting resumed [ 273.248347][ T9814] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 273.268791][ T9808] loop2: detected capacity change from 0 to 2048 [ 273.286962][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 273.286975][ T29] audit: type=1400 audit(1732985709.389:30421): avc: denied { create } for pid=9812 comm="syz.5.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.354309][ T29] audit: type=1400 audit(1732985709.419:30422): avc: denied { write } for pid=9812 comm="syz.5.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.374998][ T29] audit: type=1400 audit(1732985709.439:30423): avc: denied { map_read map_write } for pid=9822 comm="syz.3.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 273.395018][ T29] audit: type=1400 audit(1732985709.439:30424): avc: denied { perfmon } for pid=9822 comm="syz.3.1758" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 273.416043][ T29] audit: type=1400 audit(1732985709.439:30425): avc: denied { prog_run } for pid=9822 comm="syz.3.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 273.439785][ T29] audit: type=1400 audit(1732985709.539:30426): avc: denied { unmount } for pid=4664 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 273.462454][ T29] audit: type=1400 audit(1732985709.559:30427): avc: denied { create } for pid=9825 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.495503][ T9808] loop2: p1 < > p4 [ 273.500611][ T4664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.523631][ T9808] loop2: p4 size 8388608 extends beyond EOD, truncated [ 273.542865][ T29] audit: type=1400 audit(1732985709.619:30428): avc: denied { shutdown } for pid=9825 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.562771][ T29] audit: type=1400 audit(1732985709.619:30429): avc: denied { getopt } for pid=9825 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.582407][ T29] audit: type=1400 audit(1732985709.619:30430): avc: denied { connect } for pid=9825 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.611172][ T9832] syz.6.1760 uses obsolete (PF_INET,SOCK_PACKET) [ 273.638482][ T9824] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 273.668338][ T9836] loop4: detected capacity change from 0 to 512 [ 273.676113][ T9836] ext4: Unknown parameter 'smackfsdef' [ 273.692650][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 273.706788][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 273.742249][ T9836] serio: Serial port pts0 [ 274.181655][ T9849] loop4: detected capacity change from 0 to 512 [ 274.259707][ T9849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.281613][ T9849] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.291807][ T9814] syz.5.1755 (9814) used greatest stack depth: 7184 bytes left [ 274.307177][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.336176][ T9856] random: crng reseeded on system resumption [ 274.529045][ T9861] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.1766: corrupted inode contents [ 274.547128][ T9861] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.1766: mark_inode_dirty error [ 274.564578][ T9861] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.1766: corrupted inode contents [ 274.578596][ T9861] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.1766: mark_inode_dirty error [ 274.597126][ T9861] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.1766: mark inode dirty (error -117) [ 274.618123][ T9865] loop3: detected capacity change from 0 to 2048 [ 274.646574][ T9865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.661857][ T9861] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 274.682301][ T9871] loop6: detected capacity change from 0 to 512 [ 274.693464][ T9871] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 274.702092][ T9871] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 274.706663][ T9873] loop2: detected capacity change from 0 to 1024 [ 274.727680][ T9871] EXT4-fs (loop6): 1 truncate cleaned up [ 274.737667][ T9871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.756754][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.757811][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.788072][ T9873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.817115][ T9871] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #2: block 4: comm syz.6.1774: lblock 0 mapped to illegal pblock 4 (length 1) [ 274.840692][ T9871] EXT4-fs (loop6): Remounting filesystem read-only [ 274.896754][ T4664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.923118][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.941939][ T9886] loop4: detected capacity change from 0 to 128 [ 275.124366][ T9891] loop2: detected capacity change from 0 to 1024 [ 275.240653][ T9891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.355079][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.363804][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.475443][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.507433][ T9908] loop2: detected capacity change from 0 to 512 [ 275.535923][ T9908] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 275.599802][ T9914] loop4: detected capacity change from 0 to 512 [ 275.607256][ T9914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.652020][ T9914] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.897869][ T9938] __nla_validate_parse: 4 callbacks suppressed [ 275.897932][ T9938] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1798'. [ 275.945243][ T9938] 0ªX¹¦À: renamed from 61ªX¹¦À [ 275.957503][ T9940] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1799'. [ 275.972430][ T9938] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 276.246228][ T9960] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1809'. [ 276.246558][ T9962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.270748][ T9960] 1ªX¹¦À: renamed from 60ªX¹¦À [ 276.289598][ T9960] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 276.299848][ T9962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.420053][ T9973] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1813'. [ 276.435121][ T9973] 0ªX¹¦À: renamed from 61ªX¹¦À [ 276.455054][ T9973] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 276.504551][ T9975] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1814'. [ 276.624869][ T9981] FAULT_INJECTION: forcing a failure. [ 276.624869][ T9981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.637966][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.3.1816 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 276.648339][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.658430][ T9981] Call Trace: [ 276.661689][ T9981] [ 276.664689][ T9981] dump_stack_lvl+0xf2/0x150 [ 276.669317][ T9981] dump_stack+0x15/0x20 [ 276.673499][ T9981] should_fail_ex+0x223/0x230 [ 276.678219][ T9981] should_fail+0xb/0x10 [ 276.682400][ T9981] should_fail_usercopy+0x1a/0x20 [ 276.687541][ T9981] strncpy_from_user+0x25/0x210 [ 276.692380][ T9981] ? trace_event_buffer_commit+0x18f/0x620 [ 276.698251][ T9981] strncpy_from_user_nofault+0x66/0xe0 [ 276.703698][ T9981] bpf_probe_read_compat_str+0xb3/0x130 [ 276.709325][ T9981] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 276.714764][ T9981] bpf_trace_run4+0x114/0x1e0 [ 276.719424][ T9981] __traceiter_sched_switch+0x3b/0x60 [ 276.724785][ T9981] __schedule+0x816/0x930 [ 276.729121][ T9981] __cond_resched+0x28/0x50 [ 276.733659][ T9981] down_write+0xf/0x70 [ 276.737710][ T9981] sock_close+0x55/0x150 [ 276.741960][ T9981] ? __pfx_sock_close+0x10/0x10 [ 276.746795][ T9981] __fput+0x17a/0x6d0 [ 276.750761][ T9981] ____fput+0x1c/0x30 [ 276.754850][ T9981] task_work_run+0x13a/0x1a0 [ 276.759426][ T9981] syscall_exit_to_user_mode+0xa8/0x120 [ 276.765017][ T9981] do_syscall_64+0xd6/0x1c0 [ 276.769502][ T9981] ? clear_bhb_loop+0x55/0xb0 [ 276.774208][ T9981] ? clear_bhb_loop+0x55/0xb0 [ 276.778869][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.784753][ T9981] RIP: 0033:0x7ff9193e0849 [ 276.789152][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.808751][ T9981] RSP: 002b:00007ff917a57058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 276.817162][ T9981] RAX: 0000000000000000 RBX: 00007ff9195a5fa0 RCX: 00007ff9193e0849 [ 276.825151][ T9981] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 276.833215][ T9981] RBP: 00007ff917a570a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.841210][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.849236][ T9981] R13: 0000000000000000 R14: 00007ff9195a5fa0 R15: 00007fff71dd12d8 [ 276.857232][ T9981] [ 276.947300][ T9984] usb usb9: usbfs: process 9984 (syz.3.1817) did not claim interface 0 before use [ 277.011781][ T9986] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1818'. [ 277.253774][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1821'. [ 277.306218][ T9996] loop4: detected capacity change from 0 to 128 [ 277.361839][ T9998] FAULT_INJECTION: forcing a failure. [ 277.361839][ T9998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.374981][ T9998] CPU: 1 UID: 0 PID: 9998 Comm: syz.2.1825 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 277.385408][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.395458][ T9998] Call Trace: [ 277.398726][ T9998] [ 277.401724][ T9998] dump_stack_lvl+0xf2/0x150 [ 277.406332][ T9998] dump_stack+0x15/0x20 [ 277.410654][ T9998] should_fail_ex+0x223/0x230 [ 277.415346][ T9998] should_fail+0xb/0x10 [ 277.419546][ T9998] should_fail_usercopy+0x1a/0x20 [ 277.424620][ T9998] _copy_from_user+0x1e/0xb0 [ 277.429296][ T9998] move_addr_to_kernel+0x82/0x120 [ 277.434413][ T9998] __sys_sendto+0x12e/0x230 [ 277.438958][ T9998] __x64_sys_sendto+0x78/0x90 [ 277.443689][ T9998] x64_sys_call+0x29fa/0x2dc0 [ 277.448368][ T9998] do_syscall_64+0xc9/0x1c0 [ 277.452916][ T9998] ? clear_bhb_loop+0x55/0xb0 [ 277.457602][ T9998] ? clear_bhb_loop+0x55/0xb0 [ 277.462342][ T9998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.468254][ T9998] RIP: 0033:0x7f1499380849 [ 277.472726][ T9998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.492330][ T9998] RSP: 002b:00007f14979f7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 277.500843][ T9998] RAX: ffffffffffffffda RBX: 00007f1499545fa0 RCX: 00007f1499380849 [ 277.508839][ T9998] RDX: 0000000000000051 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.516814][ T9998] RBP: 00007f14979f70a0 R08: 0000000020000080 R09: 0000000000000029 [ 277.524788][ T9998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.532815][ T9998] R13: 0000000000000000 R14: 00007f1499545fa0 R15: 00007ffd51d1c0d8 [ 277.540862][ T9998] [ 277.590679][T10001] loop2: detected capacity change from 0 to 1024 [ 277.628018][T10006] loop6: detected capacity change from 0 to 1024 [ 277.642218][T10001] EXT4-fs mount: 2 callbacks suppressed [ 277.642290][T10001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.667177][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.686653][T10006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.715531][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.778611][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.802326][ T4664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.872557][T10019] loop3: detected capacity change from 0 to 128 [ 277.982147][T10021] loop2: detected capacity change from 0 to 512 [ 278.017076][T10021] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1831: bg 0: block 393: padding at end of block bitmap is not set [ 278.120100][T10032] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1836'. [ 278.138924][T10021] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 278.172239][T10021] EXT4-fs (loop2): 2 truncates cleaned up [ 278.202956][T10021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.251392][T10037] loop6: detected capacity change from 0 to 256 [ 278.273847][T10021] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #12: block 7: comm syz.2.1831: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 278.305893][T10037] vfat: Unknown parameter 'noè>Ómail' [ 278.351273][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 278.351288][ T29] audit: type=1326 audit(1732985714.449:30865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1499380849 code=0x7ffc0000 [ 278.419955][ T29] audit: type=1326 audit(1732985714.489:30866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1499380849 code=0x7ffc0000 [ 278.449125][T10042] loop5: detected capacity change from 0 to 1024 [ 278.462444][T10042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.603316][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.675809][T10050] loop6: detected capacity change from 0 to 256 [ 278.716670][ T29] audit: type=1326 audit(1732985714.819:30867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 278.749658][T10050] FAT-fs (loop6): IO charset cp863 not found [ 278.759237][ T29] audit: type=1326 audit(1732985714.819:30868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 278.782957][ T29] audit: type=1326 audit(1732985714.849:30869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 278.806587][ T29] audit: type=1326 audit(1732985714.849:30870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 278.830211][ T29] audit: type=1326 audit(1732985714.849:30871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 278.853791][ T29] audit: type=1326 audit(1732985714.849:30872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 278.884122][T10050] loop6: detected capacity change from 0 to 2048 [ 279.024726][T10060] loop3: detected capacity change from 0 to 512 [ 279.053714][T10062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.067488][T10060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.082174][ T29] audit: type=1400 audit(1732985714.929:30873): avc: denied { bind } for pid=10047 comm="syz.6.1844" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.096533][T10062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.102715][ T29] audit: type=1400 audit(1732985714.929:30874): avc: denied { node_bind } for pid=10047 comm="syz.6.1844" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 279.182850][T10060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.225017][T10060] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.279929][T10070] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1852'. [ 279.325171][T10070] 0ªX¹¦À: renamed from 61ªX¹¦À [ 279.342015][T10070] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 279.377236][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.495880][T10017] syz.2.1831 (10017) used greatest stack depth: 7176 bytes left [ 279.533298][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.676633][T10093] random: crng reseeded on system resumption [ 279.765532][T10096] loop6: detected capacity change from 0 to 512 [ 279.786247][T10096] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 279.831274][T10105] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 279.897003][T10105] vhci_hcd: invalid port number 23 [ 279.952022][T10108] loop2: detected capacity change from 0 to 512 [ 279.992079][T10108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.051386][T10108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.081261][T10108] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.208915][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.256854][T10124] loop6: detected capacity change from 0 to 1024 [ 280.281442][T10124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.325558][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.352552][T10124] EXT4-fs (loop6): shut down requested (0) [ 280.361836][T10129] loop4: detected capacity change from 0 to 512 [ 280.374987][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.391644][T10129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.408512][T10132] random: crng reseeded on system resumption [ 280.507501][ T4664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.526412][T10129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.596862][T10129] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.743869][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.761278][T10144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10144 comm=syz.3.1880 [ 280.786192][T10146] loop6: detected capacity change from 0 to 512 [ 280.856721][T10146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.876227][T10146] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.980094][ T4664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.991816][T10156] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1886'. [ 281.006329][T10156] 1ªX¹¦À: renamed from 60ªX¹¦À [ 281.014294][T10156] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 281.065835][T10167] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1891'. [ 281.086828][T10167] loop2: detected capacity change from 0 to 2048 [ 281.113876][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.122603][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.134446][T10173] loop3: detected capacity change from 0 to 512 [ 281.153087][T10167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.173597][T10173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.188162][T10167] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 281.233305][T10173] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.234501][T10184] loop4: detected capacity change from 0 to 164 [ 281.271434][T10173] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 281.283445][T10184] rock: directory entry would overflow storage [ 281.289704][T10184] rock: sig=0x66, size=4, remaining=3 [ 281.297971][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.314204][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.327293][T10183] rock: directory entry would overflow storage [ 281.333483][T10183] rock: sig=0x66, size=4, remaining=3 [ 281.358786][T10190] loop3: detected capacity change from 0 to 512 [ 281.403667][T10193] FAULT_INJECTION: forcing a failure. [ 281.403667][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 281.416370][T10193] CPU: 1 UID: 0 PID: 10193 Comm: syz.2.1898 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 281.426780][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.436903][T10193] Call Trace: [ 281.440219][T10193] [ 281.443146][T10193] dump_stack_lvl+0xf2/0x150 [ 281.447751][T10193] dump_stack+0x15/0x20 [ 281.451932][T10193] should_fail_ex+0x223/0x230 [ 281.456648][T10193] should_failslab+0x8f/0xb0 [ 281.461236][T10193] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 281.466958][T10193] ? sock_alloc_inode+0x34/0xa0 [ 281.471882][T10193] sock_alloc_inode+0x34/0xa0 [ 281.476629][T10193] ? __pfx_sock_alloc_inode+0x10/0x10 [ 281.482146][T10193] alloc_inode+0x3c/0x160 [ 281.486479][T10193] new_inode_pseudo+0x15/0x20 [ 281.491200][T10193] __sock_create+0x12b/0x5a0 [ 281.495814][T10193] __sys_socket+0xae/0x240 [ 281.500275][T10193] __x64_sys_socket+0x3f/0x50 [ 281.504979][T10193] x64_sys_call+0x2cf2/0x2dc0 [ 281.505171][T10183] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 281.509659][T10193] do_syscall_64+0xc9/0x1c0 [ 281.509687][T10193] ? clear_bhb_loop+0x55/0xb0 [ 281.509739][T10193] ? clear_bhb_loop+0x55/0xb0 [ 281.531032][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.536935][T10193] RIP: 0033:0x7f1499382767 [ 281.541427][T10193] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.561135][T10193] RSP: 002b:00007f14979f5fc8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 281.569784][T10193] RAX: ffffffffffffffda RBX: 00007f1499545fa0 RCX: 00007f1499382767 [ 281.577761][T10193] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 281.585751][T10193] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 281.593840][T10193] R10: 0000000020000000 R11: 0000000000000286 R12: 0000000000000001 [ 281.601880][T10193] R13: 0000000000000000 R14: 00007f1499545fa0 R15: 00007ffd51d1c0d8 [ 281.609845][T10193] [ 281.613029][T10193] socket: no more sockets [ 281.685226][T10190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.698227][T10190] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.741959][T10205] random: crng reseeded on system resumption [ 281.820175][T10208] FAULT_INJECTION: forcing a failure. [ 281.820175][T10208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.833361][T10208] CPU: 1 UID: 0 PID: 10208 Comm: syz.4.1904 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 281.843848][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.853978][T10208] Call Trace: [ 281.857261][T10208] [ 281.860200][T10208] dump_stack_lvl+0xf2/0x150 [ 281.864808][T10208] dump_stack+0x15/0x20 [ 281.869052][T10208] should_fail_ex+0x223/0x230 [ 281.869963][T10190] Process accounting resumed [ 281.873738][T10208] should_fail+0xb/0x10 [ 281.882502][T10208] should_fail_usercopy+0x1a/0x20 [ 281.887606][T10208] _copy_to_user+0x20/0xa0 [ 281.892020][T10208] simple_read_from_buffer+0xa0/0x110 [ 281.897464][T10208] proc_fail_nth_read+0xf9/0x140 [ 281.902505][T10208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.908074][T10208] vfs_read+0x1a2/0x700 [ 281.912344][T10208] ? __rcu_read_unlock+0x4e/0x70 [ 281.917357][T10208] ? __fget_files+0x17c/0x1c0 [ 281.922142][T10208] ksys_read+0xe8/0x1b0 [ 281.926333][T10208] __x64_sys_read+0x42/0x50 [ 281.930913][T10208] x64_sys_call+0x2874/0x2dc0 [ 281.935606][T10208] do_syscall_64+0xc9/0x1c0 [ 281.940240][T10208] ? clear_bhb_loop+0x55/0xb0 [ 281.944954][T10208] ? clear_bhb_loop+0x55/0xb0 [ 281.949723][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.955646][T10208] RIP: 0033:0x7efc6c0af25c [ 281.960157][T10208] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 281.979779][T10208] RSP: 002b:00007efc6a727050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.988207][T10208] RAX: ffffffffffffffda RBX: 00007efc6c275fa0 RCX: 00007efc6c0af25c [ 281.996188][T10208] RDX: 000000000000000f RSI: 00007efc6a7270b0 RDI: 0000000000000005 [ 282.004167][T10208] RBP: 00007efc6a7270a0 R08: 0000000000000000 R09: 0000000000000000 [ 282.012142][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.020164][T10208] R13: 0000000000000000 R14: 00007efc6c275fa0 R15: 00007ffe84feada8 [ 282.028149][T10208] [ 282.082861][T10190] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 282.131953][T10210] loop5: detected capacity change from 0 to 512 [ 282.176317][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.206990][T10210] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 282.297114][T10210] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1905: iget: bad i_size value: -67835469387268086 [ 282.327641][T10210] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1905: couldn't read orphan inode 15 (err -117) [ 282.357603][T10210] EXT4-fs (loop5): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.409654][T10210] ext2 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.492530][T10210] EXT4-fs error (device loop5): ext4_add_entry:2444: inode #2: comm syz.5.1905: Directory hole found for htree leaf block 0 [ 282.527204][T10235] random: crng reseeded on system resumption [ 282.534054][ T3888] EXT4-fs (loop5): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 282.554574][T10229] loop6: detected capacity change from 0 to 8192 [ 282.562867][T10229] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.596276][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.604721][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.641903][T10239] xt_hashlimit: max too large, truncated to 1048576 [ 282.684303][T10239] Cannot find set identified by id 0 to match [ 282.751443][T10248] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1921'. [ 282.797239][T10248] 0ªX¹¦À: renamed from 61ªX¹¦À [ 282.806339][T10248] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 282.847660][T10252] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1923'. [ 282.869766][T10252] 0ªX¹¦À: renamed from 61ªX¹¦À [ 282.887742][T10252] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 283.302579][T10256] chnl_net:caif_netlink_parms(): no params data found [ 283.337843][T10272] loop3: detected capacity change from 0 to 4096 [ 283.378575][T10272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.457455][T10256] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.464558][T10256] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.473054][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 283.473069][ T29] audit: type=1400 audit(1732985719.579:31071): avc: denied { read write } for pid=10267 comm="syz.3.1925" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.509589][T10256] bridge_slave_0: entered allmulticast mode [ 283.532426][T10256] bridge_slave_0: entered promiscuous mode [ 283.533485][T10256] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.533591][T10256] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.534787][T10256] bridge_slave_1: entered allmulticast mode [ 283.539957][T10256] bridge_slave_1: entered promiscuous mode [ 283.599126][T10256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.696110][T10256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.727496][T10256] team0: Port device team_slave_0 added [ 283.733938][T10256] team0: Port device team_slave_1 added [ 283.750410][T10256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.757464][T10256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.783401][T10256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.794919][T10256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.801871][T10256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.827807][T10256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.863400][T10256] hsr_slave_0: entered promiscuous mode [ 283.869994][T10256] hsr_slave_1: entered promiscuous mode [ 283.875993][T10256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.883563][T10256] Cannot create hsr debugfs directory [ 283.892582][ T29] audit: type=1400 audit(1732985719.999:31072): avc: denied { write } for pid=10280 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 283.926677][T10284] loop2: detected capacity change from 0 to 512 [ 283.956991][T10284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.968353][ T29] audit: type=1400 audit(1732985720.019:31073): avc: denied { create } for pid=10280 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.988059][ T29] audit: type=1400 audit(1732985720.019:31074): avc: denied { write } for pid=10280 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.998990][T10284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.007538][ T29] audit: type=1326 audit(1732985720.049:31075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 284.032565][T10284] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.043591][ T29] audit: type=1326 audit(1732985720.049:31076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 284.077754][ T29] audit: type=1326 audit(1732985720.049:31077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 284.101377][ T29] audit: type=1326 audit(1732985720.049:31078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 284.124985][ T29] audit: type=1326 audit(1732985720.049:31079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 284.219253][T10293] loop5: detected capacity change from 0 to 512 [ 284.231782][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.284454][T10293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.313793][T10299] random: crng reseeded on system resumption [ 284.322543][T10293] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.330776][ T29] audit: type=1326 audit(1732985720.259:31080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e3540849 code=0x7ffc0000 [ 284.363207][T10256] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 284.391515][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.392800][T10256] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 284.414579][T10293] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 284.461573][T10256] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 284.469447][T10305] 9pnet_fd: Insufficient options for proto=fd [ 284.471292][T10303] loop2: detected capacity change from 0 to 1024 [ 284.505815][T10256] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 284.519306][T10303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.545960][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.656490][T10256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.666653][T10256] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.689289][ T9438] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.694000][T10312] loop5: detected capacity change from 0 to 2048 [ 284.696367][ T9438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.703725][T10310] FAULT_INJECTION: forcing a failure. [ 284.703725][T10310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.723167][T10310] CPU: 1 UID: 0 PID: 10310 Comm: syz.3.1937 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 284.733630][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 284.743797][T10310] Call Trace: [ 284.747081][T10310] [ 284.750015][T10310] dump_stack_lvl+0xf2/0x150 [ 284.754618][T10310] dump_stack+0x15/0x20 [ 284.758816][T10310] should_fail_ex+0x223/0x230 [ 284.763497][T10310] should_fail+0xb/0x10 [ 284.767661][T10310] should_fail_usercopy+0x1a/0x20 [ 284.772695][T10310] _copy_to_user+0x20/0xa0 [ 284.777160][T10310] simple_read_from_buffer+0xa0/0x110 [ 284.782597][T10310] proc_fail_nth_read+0xf9/0x140 [ 284.787603][T10310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.793171][T10310] vfs_read+0x1a2/0x700 [ 284.797392][T10310] ? __rcu_read_unlock+0x4e/0x70 [ 284.797492][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.802366][T10310] ? __fget_files+0x17c/0x1c0 [ 284.809417][ T9438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.814016][T10310] ksys_read+0xe8/0x1b0 [ 284.825407][T10310] __x64_sys_read+0x42/0x50 [ 284.829927][T10310] x64_sys_call+0x2874/0x2dc0 [ 284.834683][T10310] do_syscall_64+0xc9/0x1c0 [ 284.839196][T10310] ? clear_bhb_loop+0x55/0xb0 [ 284.843883][T10310] ? clear_bhb_loop+0x55/0xb0 [ 284.848712][T10310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.854623][T10310] RIP: 0033:0x7ff9193df25c [ 284.859044][T10310] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 284.878660][T10310] RSP: 002b:00007ff917a57050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.887085][T10310] RAX: ffffffffffffffda RBX: 00007ff9195a5fa0 RCX: 00007ff9193df25c [ 284.895122][T10310] RDX: 000000000000000f RSI: 00007ff917a570b0 RDI: 0000000000000008 [ 284.903157][T10310] RBP: 00007ff917a570a0 R08: 0000000000000000 R09: 0000000000000000 [ 284.911168][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.919152][T10310] R13: 0000000000000000 R14: 00007ff9195a5fa0 R15: 00007fff71dd12d8 [ 284.927136][T10310] [ 284.946458][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.957168][T10312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.976831][T10256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.026986][T10312] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1935'. [ 285.135510][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.331551][T10342] random: crng reseeded on system resumption [ 285.392899][T10256] veth0_vlan: entered promiscuous mode [ 285.421434][T10256] veth1_vlan: entered promiscuous mode [ 285.461790][T10354] loop5: detected capacity change from 0 to 512 [ 285.483964][T10256] veth0_macvtap: entered promiscuous mode [ 285.511686][T10256] veth1_macvtap: entered promiscuous mode [ 285.518824][T10354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.544477][T10365] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1946'. [ 285.559082][T10354] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.572524][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.583042][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.592888][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.603328][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.613186][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.623697][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.633519][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.643941][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.653775][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.664194][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.690124][T10370] loop2: detected capacity change from 0 to 2048 [ 285.733082][T10354] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 285.753804][T10256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.770895][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.781502][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.791347][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.801789][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.811827][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.822391][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.832224][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.842126][T10370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.842717][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.864446][T10256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.874864][T10256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.885325][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.904134][T10365] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 285.992318][T10256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.047621][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.058185][T10256] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.067165][T10256] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.075948][T10256] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.084692][T10256] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.183624][T10380] ------------[ cut here ]------------ [ 286.189227][T10380] refcount_t: underflow; use-after-free. [ 286.195279][T10380] WARNING: CPU: 1 PID: 10380 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 286.204832][T10380] Modules linked in: [ 286.208802][T10380] CPU: 1 UID: 0 PID: 10380 Comm: syz.2.1949 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 286.219242][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.229315][T10380] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 286.235536][T10380] Code: 72 ff ff ff e8 ab 2f 70 ff 48 c7 c7 2b cb b2 86 e8 2f 7d 89 ff c6 05 53 70 f2 04 01 90 48 c7 c7 00 f8 1b 86 e8 3b c0 51 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 7c 2f 70 ff 48 c7 c7 28 cb b2 86 e8 [ 286.255197][T10380] RSP: 0018:ffffc9000150fb28 EFLAGS: 00010246 [ 286.261309][T10380] RAX: 7b98591720c42300 RBX: ffff88811f2ae8e4 RCX: ffff8881226e0000 [ 286.269373][T10380] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 286.277390][T10380] RBP: 0000000000000003 R08: ffffffff81121c87 R09: 0000000000000000 [ 286.285391][T10380] R10: 0001ffffffffffff R11: ffff8881226e0000 R12: ffff88812703e868 [ 286.293529][T10380] R13: 0000000000000004 R14: ffff88811f2ae8e4 R15: 0000000000000000 [ 286.301538][T10380] FS: 00007f14979f76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 286.310493][T10380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.317097][T10380] CR2: ffffffffde000000 CR3: 000000011f898000 CR4: 00000000003506f0 [ 286.325096][T10380] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.333141][T10380] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.341146][T10380] Call Trace: [ 286.344420][T10380] [ 286.347478][T10380] ? __warn+0x141/0x350 [ 286.351644][T10380] ? report_bug+0x315/0x420 [ 286.356377][T10380] ? refcount_warn_saturate+0x1c6/0x230 [ 286.362124][T10380] ? handle_bug+0x60/0x90 [ 286.366509][T10380] ? exc_invalid_op+0x1a/0x50 [ 286.371236][T10380] ? asm_exc_invalid_op+0x1a/0x20 [ 286.376387][T10380] ? __warn_printk+0x167/0x1b0 [ 286.381163][T10380] ? refcount_warn_saturate+0x1c6/0x230 [ 286.386820][T10380] ? refcount_warn_saturate+0x1c5/0x230 [ 286.392505][T10380] sk_skb_reason_drop+0xe9/0x290 [ 286.397506][T10380] j1939_session_put+0x157/0x2a0 [ 286.402459][T10380] j1939_sk_sendmsg+0xa71/0xc00 [ 286.407410][T10380] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 286.412803][T10380] __sock_sendmsg+0x140/0x180 [ 286.417619][T10380] ____sys_sendmsg+0x312/0x410 [ 286.422403][T10380] __sys_sendmsg+0x19d/0x230 [ 286.427046][T10380] __x64_sys_sendmsg+0x46/0x50 [ 286.431963][T10380] x64_sys_call+0x2734/0x2dc0 [ 286.436731][T10380] do_syscall_64+0xc9/0x1c0 [ 286.441283][T10380] ? clear_bhb_loop+0x55/0xb0 [ 286.446011][T10380] ? clear_bhb_loop+0x55/0xb0 [ 286.450757][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.456685][T10380] RIP: 0033:0x7f1499380849 [ 286.461134][T10380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.480812][T10380] RSP: 002b:00007f14979f7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.489387][T10380] RAX: ffffffffffffffda RBX: 00007f1499545fa0 RCX: 00007f1499380849 [ 286.497446][T10380] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 286.505656][T10380] RBP: 00007f14979f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.513675][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.521687][T10380] R13: 0000000000000000 R14: 00007f1499545fa0 R15: 00007ffd51d1c0d8 [ 286.529686][T10380] [ 286.532788][T10380] ---[ end trace 0000000000000000 ]--- [ 286.544065][T10386] loop4: detected capacity change from 0 to 512 [ 286.667820][T10391] loop2: detected capacity change from 0 to 512 [ 286.668138][T10386] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 286.687873][T10391] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 286.750159][T10399] lo: entered allmulticast mode [ 286.780923][T10399] lo: left allmulticast mode [ 286.788416][T10386] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1951'. [ 286.815996][T10403] loop7: detected capacity change from 0 to 512 [ 286.888641][T10403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.931443][T10403] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.007541][ C0] hrtimer: interrupt took 58484 ns [ 287.043871][T10409] syz_tun: entered promiscuous mode [ 287.061000][T10409] macsec1: entered promiscuous mode [ 287.068932][T10409] macsec1: entered allmulticast mode [ 287.074530][T10409] syz_tun: entered allmulticast mode [ 287.098455][T10403] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 287.186842][T10409] syz_tun: left allmulticast mode [ 287.192872][T10409] syz_tun: left promiscuous mode [ 287.217623][T10424] 9pnet_fd: Insufficient options for proto=fd [ 287.226380][T10400] Process accounting resumed [ 287.246689][T10256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.392608][T10431] loop3: detected capacity change from 0 to 256 [ 287.402025][T10375] loop5: detected capacity change from 0 to 512 [ 287.422962][T10434] loop7: detected capacity change from 0 to 512 [ 287.429596][T10431] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.444740][T10436] FAULT_INJECTION: forcing a failure. [ 287.444740][T10436] name failslab, interval 1, probability 0, space 0, times 0 [ 287.457414][T10436] CPU: 1 UID: 0 PID: 10436 Comm: syz.4.1969 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 287.469311][T10436] Tainted: [W]=WARN [ 287.473115][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.483174][T10436] Call Trace: [ 287.486450][T10436] [ 287.489377][T10436] dump_stack_lvl+0xf2/0x150 [ 287.493982][T10436] dump_stack+0x15/0x20 [ 287.498195][T10436] should_fail_ex+0x223/0x230 [ 287.502878][T10436] should_failslab+0x8f/0xb0 [ 287.507466][T10436] __kmalloc_noprof+0xab/0x3f0 [ 287.512305][T10436] ? bpf_test_init+0xc7/0x170 [ 287.517032][T10436] ? _parse_integer+0x27/0x30 [ 287.521719][T10436] bpf_test_init+0xc7/0x170 [ 287.526232][T10436] bpf_prog_test_run_skb+0x153/0xc00 [ 287.531582][T10436] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 287.537393][T10436] bpf_prog_test_run+0x20f/0x3a0 [ 287.540912][T10375] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 287.542375][T10436] __sys_bpf+0x400/0x7a0 [ 287.565469][T10375] EXT4-fs: error: could not find journal device path [ 287.569564][T10436] __x64_sys_bpf+0x43/0x50 [ 287.580747][T10436] x64_sys_call+0x2914/0x2dc0 [ 287.585525][T10436] do_syscall_64+0xc9/0x1c0 [ 287.590041][T10436] ? clear_bhb_loop+0x55/0xb0 [ 287.594920][T10436] ? clear_bhb_loop+0x55/0xb0 [ 287.599678][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.605592][T10436] RIP: 0033:0x7efc6c0b0849 [ 287.610041][T10436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.629656][T10436] RSP: 002b:00007efc6a706058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.638075][T10436] RAX: ffffffffffffffda RBX: 00007efc6c276080 RCX: 00007efc6c0b0849 [ 287.646127][T10436] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 287.654379][T10436] RBP: 00007efc6a7060a0 R08: 0000000000000000 R09: 0000000000000000 [ 287.662346][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.670321][T10436] R13: 0000000000000000 R14: 00007efc6c276080 R15: 00007ffe84feada8 [ 287.678302][T10436] [ 287.706425][T10434] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 287.749382][T10439] loop3: detected capacity change from 0 to 512 [ 287.787923][T10439] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 287.800142][T10441] ebt_among: dst integrity fail: 10d [ 287.811439][T10434] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1970'. [ 287.818011][T10439] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 287.830430][T10439] EXT4-fs (loop3): group descriptors corrupted! [ 287.854717][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 287.930787][T10439] hsr0: entered promiscuous mode [ 287.938724][T10449] FAULT_INJECTION: forcing a failure. [ 287.938724][T10449] name failslab, interval 1, probability 0, space 0, times 0 [ 287.951449][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.7.1973 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 287.963467][T10449] Tainted: [W]=WARN [ 287.967275][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.977364][T10449] Call Trace: [ 287.980650][T10449] [ 287.983661][T10449] dump_stack_lvl+0xf2/0x150 [ 287.988293][T10449] dump_stack+0x15/0x20 [ 287.992465][T10449] should_fail_ex+0x223/0x230 [ 287.997206][T10449] should_failslab+0x8f/0xb0 [ 288.001822][T10449] kmem_cache_alloc_node_noprof+0x59/0x320 [ 288.007635][T10449] ? __alloc_skb+0x10b/0x310 [ 288.012255][T10449] __alloc_skb+0x10b/0x310 [ 288.016726][T10449] ? audit_log_start+0x34c/0x6b0 [ 288.021706][T10449] audit_log_start+0x368/0x6b0 [ 288.026588][T10449] audit_seccomp+0x4b/0x130 [ 288.031124][T10449] __seccomp_filter+0x6fa/0x1180 [ 288.036115][T10449] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.041781][T10449] ? vfs_write+0x596/0x920 [ 288.046198][T10449] __secure_computing+0x9f/0x1c0 [ 288.051158][T10449] syscall_trace_enter+0xd1/0x1f0 [ 288.056213][T10449] ? fpregs_assert_state_consistent+0x83/0xa0 [ 288.062293][T10449] do_syscall_64+0xaa/0x1c0 [ 288.066796][T10449] ? clear_bhb_loop+0x55/0xb0 [ 288.071469][T10449] ? clear_bhb_loop+0x55/0xb0 [ 288.076213][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.082102][T10449] RIP: 0033:0x7f609bad0849 [ 288.086505][T10449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.106149][T10449] RSP: 002b:00007f609a147058 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 288.114552][T10449] RAX: ffffffffffffffda RBX: 00007f609bc95fa0 RCX: 00007f609bad0849 [ 288.122512][T10449] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 288.130471][T10449] RBP: 00007f609a1470a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.138431][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.146452][T10449] R13: 0000000000000000 R14: 00007f609bc95fa0 R15: 00007fffdfe1cc28 [ 288.154420][T10449] [ 288.252167][T10459] loop7: detected capacity change from 0 to 512 [ 288.276160][T10455] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 288.320008][T10459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.381869][T10466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'. [ 288.390893][T10466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'. [ 288.440170][T10459] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.528505][T10459] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 288.584194][T10459] Process accounting resumed [ 288.596759][T10256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.615323][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 288.615337][ T29] audit: type=1400 audit(1732985724.709:31283): avc: denied { write } for pid=10472 comm="syz.2.1983" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.678957][T10480] loop7: detected capacity change from 0 to 512 [ 288.692231][ T29] audit: type=1400 audit(1732985724.739:31284): avc: denied { read } for pid=10476 comm="syz.3.1985" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 288.716618][ T29] audit: type=1400 audit(1732985724.739:31285): avc: denied { open } for pid=10476 comm="syz.3.1985" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 288.724147][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1985'. [ 288.764812][T10488] 9pnet_fd: Insufficient options for proto=fd [ 288.781248][T10480] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 288.817338][T10493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1990'. [ 288.826490][T10480] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1984'. [ 288.838700][ T29] audit: type=1400 audit(1732985724.879:31286): avc: denied { name_bind } for pid=10470 comm="syz.5.1981" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 288.847154][T10485] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1985'. [ 288.860713][ T29] audit: type=1400 audit(1732985724.879:31287): avc: denied { node_bind } for pid=10470 comm="syz.5.1981" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 288.890434][ T29] audit: type=1326 audit(1732985724.889:31288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1499380849 code=0x7ffc0000 [ 288.914328][ T29] audit: type=1326 audit(1732985724.889:31289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1499380849 code=0x7ffc0000 [ 288.938054][ T29] audit: type=1326 audit(1732985724.889:31290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1499380849 code=0x7ffc0000 [ 288.961682][ T29] audit: type=1326 audit(1732985724.889:31291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1499380849 code=0x7ffc0000 [ 288.985760][ T29] audit: type=1326 audit(1732985725.049:31292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1499380849 code=0x7ffc0000 [ 289.028890][T10499] FAULT_INJECTION: forcing a failure. [ 289.028890][T10499] name failslab, interval 1, probability 0, space 0, times 0 [ 289.041579][T10499] CPU: 1 UID: 0 PID: 10499 Comm: syz.7.1992 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 289.053557][T10499] Tainted: [W]=WARN [ 289.057435][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 289.067543][T10499] Call Trace: [ 289.070823][T10499] [ 289.073794][T10499] dump_stack_lvl+0xf2/0x150 [ 289.078399][T10499] dump_stack+0x15/0x20 [ 289.082560][T10499] should_fail_ex+0x223/0x230 [ 289.087238][T10499] should_failslab+0x8f/0xb0 [ 289.091822][T10499] kmem_cache_alloc_node_noprof+0x59/0x320 [ 289.097659][T10499] ? __alloc_skb+0x10b/0x310 [ 289.102375][T10499] __alloc_skb+0x10b/0x310 [ 289.106800][T10499] netlink_alloc_large_skb+0xad/0xe0 [ 289.112080][T10499] netlink_sendmsg+0x3b4/0x6e0 [ 289.116840][T10499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.122116][T10499] __sock_sendmsg+0x140/0x180 [ 289.126818][T10499] ____sys_sendmsg+0x312/0x410 [ 289.131574][T10499] __sys_sendmsg+0x19d/0x230 [ 289.136229][T10499] __x64_sys_sendmsg+0x46/0x50 [ 289.140992][T10499] x64_sys_call+0x2734/0x2dc0 [ 289.145703][T10499] do_syscall_64+0xc9/0x1c0 [ 289.150203][T10499] ? clear_bhb_loop+0x55/0xb0 [ 289.154944][T10499] ? clear_bhb_loop+0x55/0xb0 [ 289.159695][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.165594][T10499] RIP: 0033:0x7f609bad0849 [ 289.170003][T10499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.189740][T10499] RSP: 002b:00007f609a147058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.198145][T10499] RAX: ffffffffffffffda RBX: 00007f609bc95fa0 RCX: 00007f609bad0849 [ 289.206212][T10499] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 289.214171][T10499] RBP: 00007f609a1470a0 R08: 0000000000000000 R09: 0000000000000000 [ 289.222170][T10499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.230132][T10499] R13: 0000000000000000 R14: 00007f609bc95fa0 R15: 00007fffdfe1cc28 [ 289.238160][T10499] [ 289.256029][T10502] loop4: detected capacity change from 0 to 128 [ 289.262669][T10502] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.294897][T10502] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.352099][ T170] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.405992][T10506] loop7: detected capacity change from 0 to 512 [ 289.495067][T10506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.526656][T10512] loop2: detected capacity change from 0 to 512 [ 289.557551][T10506] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.576959][T10512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.636066][T10512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.670924][T10506] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 289.683466][T10512] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.718257][T10523] loop4: detected capacity change from 0 to 128 [ 289.737449][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.756596][T10523] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 289.776968][T10506] Process accounting resumed [ 289.800211][T10256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.809635][T10525] loop2: detected capacity change from 0 to 512 [ 289.848114][T10525] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 289.878717][T10525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2002'. [ 289.888651][T10533] loop7: detected capacity change from 0 to 512 [ 289.928038][T10533] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.971653][T10533] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.992057][T10538] loop4: detected capacity change from 0 to 512 [ 290.008944][T10538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.032715][T10533] Process accounting resumed [ 290.040453][T10533] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 290.074784][T10538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.103157][T10538] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.119116][T10256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.155641][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.235582][T10553] loop2: detected capacity change from 0 to 2048 [ 290.256475][T10553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.272250][T10553] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.323926][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.342496][T10556] loop7: detected capacity change from 0 to 512 [ 290.359371][T10556] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 290.377211][T10568] random: crng reseeded on system resumption [ 290.385087][T10556] EXT4-fs (loop7): orphan cleanup on readonly fs [ 290.400004][T10556] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 290.434682][T10556] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 290.457899][T10556] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 290.479312][T10556] EXT4-fs (loop7): 1 truncate cleaned up [ 290.505977][T10556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.616962][T10581] loop3: detected capacity change from 0 to 512 [ 290.637495][T10584] all: renamed from ip6gre0 (while UP) [ 290.643173][T10582] loop2: detected capacity change from 0 to 2048 [ 290.652549][T10584] pim6reg1: entered promiscuous mode [ 290.657909][T10584] pim6reg1: entered allmulticast mode [ 290.683232][T10581] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 290.698119][T10587] loop5: detected capacity change from 0 to 512 [ 290.705672][T10581] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.715001][T10581] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 290.728101][T10587] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 290.738876][T10581] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 290.753642][T10256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.763805][T10581] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 290.773370][T10581] EXT4-fs (loop3): 1 truncate cleaned up [ 290.779657][T10581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.780854][T10582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.855993][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.900590][T10600] loop4: detected capacity change from 0 to 512 [ 290.930690][T10602] loop3: detected capacity change from 0 to 512 [ 290.935944][T10582] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.984450][T10610] loop7: detected capacity change from 0 to 512 [ 290.993080][T10602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.011242][T10600] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 291.025917][T10609] geneve0: entered promiscuous mode [ 291.043725][T10610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.045007][T10602] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.060221][T10600] EXT4-fs (loop4): orphan cleanup on readonly fs [ 291.075906][T10609] geneve0: left promiscuous mode [ 291.075986][T10600] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 291.084480][T10610] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.101708][T10601] Process accounting resumed [ 291.109648][T10600] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 291.120112][T10610] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.125118][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.143299][T10600] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 291.155394][T10600] EXT4-fs (loop4): 1 truncate cleaned up [ 291.161548][T10600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.206771][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.263483][T10624] loop5: detected capacity change from 0 to 512 [ 291.265683][T10626] 9pnet_fd: Insufficient options for proto=fd [ 291.294590][T10624] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.349193][T10624] Process accounting resumed [ 291.393581][T10624] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 291.470539][T10635] all: renamed from ip6gre0 (while UP) [ 291.541190][T10640] loop5: detected capacity change from 0 to 2048 [ 291.600095][T10650] loop2: detected capacity change from 0 to 512 [ 291.669646][T10658] FAULT_INJECTION: forcing a failure. [ 291.669646][T10658] name failslab, interval 1, probability 0, space 0, times 0 [ 291.682351][T10658] CPU: 1 UID: 0 PID: 10658 Comm: syz.7.2044 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 291.694366][T10658] Tainted: [W]=WARN [ 291.696731][T10647] pimreg: entered allmulticast mode [ 291.698151][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.704492][T10647] pimreg: left allmulticast mode [ 291.713387][T10658] Call Trace: [ 291.713398][T10658] [ 291.713405][T10658] dump_stack_lvl+0xf2/0x150 [ 291.713435][T10658] dump_stack+0x15/0x20 [ 291.713487][T10658] should_fail_ex+0x223/0x230 [ 291.738082][T10658] should_failslab+0x8f/0xb0 [ 291.742744][T10658] kmem_cache_alloc_node_noprof+0x59/0x320 [ 291.748561][T10658] ? __alloc_skb+0x10b/0x310 [ 291.753174][T10658] __alloc_skb+0x10b/0x310 [ 291.757680][T10658] netlink_alloc_large_skb+0xad/0xe0 [ 291.763034][T10658] netlink_sendmsg+0x3b4/0x6e0 [ 291.767813][T10658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.773141][T10658] __sock_sendmsg+0x140/0x180 [ 291.777840][T10658] ____sys_sendmsg+0x312/0x410 [ 291.782677][T10658] __sys_sendmsg+0x19d/0x230 [ 291.787287][T10658] __x64_sys_sendmsg+0x46/0x50 [ 291.792061][T10658] x64_sys_call+0x2734/0x2dc0 [ 291.796752][T10658] do_syscall_64+0xc9/0x1c0 [ 291.801330][T10658] ? clear_bhb_loop+0x55/0xb0 [ 291.806024][T10658] ? clear_bhb_loop+0x55/0xb0 [ 291.810711][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.816616][T10658] RIP: 0033:0x7f609bad0849 [ 291.821039][T10658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.840659][T10658] RSP: 002b:00007f609a147058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.849080][T10658] RAX: ffffffffffffffda RBX: 00007f609bc95fa0 RCX: 00007f609bad0849 [ 291.857244][T10658] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 291.865220][T10658] RBP: 00007f609a1470a0 R08: 0000000000000000 R09: 0000000000000000 [ 291.873192][T10658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.881176][T10658] R13: 0000000000000000 R14: 00007f609bc95fa0 R15: 00007fffdfe1cc28 [ 291.889159][T10658] [ 291.893206][T10274] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 291.913096][T10650] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.943207][T10650] Process accounting resumed [ 291.958963][T10663] 9pnet_fd: Insufficient options for proto=fd [ 292.022826][T10667] loop7: detected capacity change from 0 to 512 [ 292.067405][T10667] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.117549][T10667] Process accounting resumed [ 292.139631][T10667] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 292.156515][T10673] __nla_validate_parse: 8 callbacks suppressed [ 292.156610][T10673] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2049'. [ 292.261774][T10681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2052'. [ 292.262418][T10665] loop5: detected capacity change from 0 to 512 [ 292.271009][T10681] all: renamed from gre0 (while UP) [ 292.296525][T10673] loop2: detected capacity change from 0 to 2048 [ 292.309896][T10683] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2053'. [ 292.328631][T10665] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.375738][T10673] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 292.393583][T10665] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2045: Failed to acquire dquot type 0 [ 292.415450][T10665] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 292.443747][T10665] EXT4-fs (loop5): 1 truncate cleaned up [ 292.788256][T10711] loop4: detected capacity change from 0 to 512 [ 292.882628][T10711] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.950001][T10718] FAULT_INJECTION: forcing a failure. [ 292.950001][T10718] name failslab, interval 1, probability 0, space 0, times 0 [ 292.962815][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.2.2063 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 292.974797][T10718] Tainted: [W]=WARN [ 292.978675][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.988722][T10718] Call Trace: [ 292.992016][T10718] [ 292.994982][T10718] dump_stack_lvl+0xf2/0x150 [ 292.999605][T10718] dump_stack+0x15/0x20 [ 293.003803][T10718] should_fail_ex+0x223/0x230 [ 293.008617][T10718] should_failslab+0x8f/0xb0 [ 293.013261][T10718] kmem_cache_alloc_node_noprof+0x59/0x320 [ 293.019122][T10718] ? __alloc_skb+0x10b/0x310 [ 293.023739][T10718] __alloc_skb+0x10b/0x310 [ 293.028245][T10718] netlink_alloc_large_skb+0xad/0xe0 [ 293.033561][T10718] netlink_sendmsg+0x3b4/0x6e0 [ 293.038346][T10718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.043647][T10718] __sock_sendmsg+0x140/0x180 [ 293.048347][T10718] ____sys_sendmsg+0x312/0x410 [ 293.053108][T10718] __sys_sendmsg+0x19d/0x230 [ 293.057744][T10718] __x64_sys_sendmsg+0x46/0x50 [ 293.062574][T10718] x64_sys_call+0x2734/0x2dc0 [ 293.067286][T10718] do_syscall_64+0xc9/0x1c0 [ 293.071800][T10718] ? clear_bhb_loop+0x55/0xb0 [ 293.076484][T10718] ? clear_bhb_loop+0x55/0xb0 [ 293.081163][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.087095][T10718] RIP: 0033:0x7f1499380849 [ 293.091535][T10718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.111166][T10718] RSP: 002b:00007f14979f7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.119612][T10718] RAX: ffffffffffffffda RBX: 00007f1499545fa0 RCX: 00007f1499380849 [ 293.127574][T10718] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 293.135532][T10718] RBP: 00007f14979f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 293.143562][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.151526][T10718] R13: 0000000000000000 R14: 00007f1499545fa0 R15: 00007ffd51d1c0d8 [ 293.159508][T10718] [ 293.186172][T10711] Process accounting resumed [ 293.222745][T10711] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 293.239668][T10724] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2067'. [ 293.270969][T10720] loop5: detected capacity change from 0 to 512 [ 293.296608][T10720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.453905][T10720] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.552742][T10740] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2074'. [ 293.583625][T10744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2075'. [ 293.594102][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.636819][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.645731][T10744] all: renamed from gre0 (while UP) [ 293.655844][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 293.655857][ T29] audit: type=1326 audit(1732985729.739:31881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c0b0849 code=0x7ffc0000 [ 293.685700][ T29] audit: type=1326 audit(1732985729.739:31882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc6c0b0849 code=0x7ffc0000 [ 293.695353][T10740] loop4: detected capacity change from 0 to 2048 [ 293.709316][ T29] audit: type=1326 audit(1732985729.739:31883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c0b0849 code=0x7ffc0000 [ 293.709351][ T29] audit: type=1326 audit(1732985729.749:31884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc6c0b0849 code=0x7ffc0000 [ 293.762796][ T29] audit: type=1326 audit(1732985729.749:31885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc6c0b0883 code=0x7ffc0000 [ 293.786307][ T29] audit: type=1326 audit(1732985729.759:31886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc6c0af2ff code=0x7ffc0000 [ 293.809811][ T29] audit: type=1326 audit(1732985729.759:31887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efc6c0b08d7 code=0x7ffc0000 [ 293.833376][ T29] audit: type=1326 audit(1732985729.759:31888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc6c0af1b0 code=0x7ffc0000 [ 293.833400][ T29] audit: type=1326 audit(1732985729.759:31889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc6c0b044b code=0x7ffc0000 [ 293.833486][ T29] audit: type=1326 audit(1732985729.899:31890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efc6c0af4aa code=0x7ffc0000 [ 293.924427][T10752] FAULT_INJECTION: forcing a failure. [ 293.924427][T10752] name failslab, interval 1, probability 0, space 0, times 0 [ 293.924457][T10752] CPU: 1 UID: 0 PID: 10752 Comm: syz.7.2078 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 293.924495][T10752] Tainted: [W]=WARN [ 293.924502][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.924520][T10752] Call Trace: [ 293.924526][T10752] [ 293.924533][T10752] dump_stack_lvl+0xf2/0x150 [ 293.924566][T10752] dump_stack+0x15/0x20 [ 293.924589][T10752] should_fail_ex+0x223/0x230 [ 293.924655][T10752] should_failslab+0x8f/0xb0 [ 293.924677][T10752] kmem_cache_alloc_node_noprof+0x59/0x320 [ 293.924706][T10752] ? __alloc_skb+0x10b/0x310 [ 293.924736][T10752] ? __rcu_read_unlock+0x4e/0x70 [ 293.924829][T10752] __alloc_skb+0x10b/0x310 [ 293.924862][T10752] alloc_skb_with_frags+0x80/0x450 [ 293.924882][T10752] ? ___slab_alloc+0x2b7/0x980 [ 293.924908][T10752] ? mod_objcg_state+0x2ea/0x4f0 [ 293.925031][T10752] sock_alloc_send_pskb+0x435/0x4f0 [ 293.925056][T10752] unix_dgram_sendmsg+0x472/0xff0 [ 293.925079][T10752] ? selinux_socket_sendmsg+0x185/0x1c0 [ 293.925109][T10752] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 293.925174][T10752] __sock_sendmsg+0x140/0x180 [ 293.925202][T10752] ____sys_sendmsg+0x312/0x410 [ 293.925224][T10752] __sys_sendmmsg+0x227/0x4b0 [ 293.925262][T10752] __x64_sys_sendmmsg+0x57/0x70 [ 293.925283][T10752] x64_sys_call+0x29aa/0x2dc0 [ 293.925362][T10752] do_syscall_64+0xc9/0x1c0 [ 293.925460][T10752] ? clear_bhb_loop+0x55/0xb0 [ 293.925493][T10752] ? clear_bhb_loop+0x55/0xb0 [ 293.925520][T10752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.925546][T10752] RIP: 0033:0x7f609bad0849 [ 293.925562][T10752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.925614][T10752] RSP: 002b:00007f609a147058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.925631][T10752] RAX: ffffffffffffffda RBX: 00007f609bc95fa0 RCX: 00007f609bad0849 [ 293.925642][T10752] RDX: 0000000000000002 RSI: 0000000020000fc0 RDI: 0000000000000004 [ 293.925654][T10752] RBP: 00007f609a1470a0 R08: 0000000000000000 R09: 0000000000000000 [ 293.925667][T10752] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 293.925680][T10752] R13: 0000000000000000 R14: 00007f609bc95fa0 R15: 00007fffdfe1cc28 [ 293.925765][T10752] [ 294.220799][T10763] 9pnet_fd: Insufficient options for proto=fd [ 294.320378][T10765] loop4: detected capacity change from 0 to 512 [ 294.380027][T10765] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.381151][T10765] Process accounting resumed [ 294.392193][T10765] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 294.619584][T10778] loop4: detected capacity change from 0 to 512 [ 294.656331][T10778] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 294.676730][T10778] EXT4-fs (loop4): orphan cleanup on readonly fs [ 294.684687][T10783] 9pnet_fd: Insufficient options for proto=fd [ 294.691600][T10778] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 294.721737][T10778] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 294.742856][T10778] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 294.752608][T10785] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2090'. [ 294.763512][T10778] EXT4-fs (loop4): 1 truncate cleaned up [ 294.784170][T10785] loop5: detected capacity change from 0 to 2048 [ 294.914354][T10796] loop5: detected capacity change from 0 to 512 [ 294.949320][T10796] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.984141][T10796] Process accounting resumed [ 295.004769][T10796] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 295.041924][T10800] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2095'. [ 295.109730][T10804] loop5: detected capacity change from 0 to 512 [ 295.158201][T10804] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.192427][T10804] Process accounting resumed [ 295.213040][T10804] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 295.308985][T10819] loop7: detected capacity change from 0 to 512 [ 295.334479][T10823] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2104'. [ 295.342843][T10825] loop5: detected capacity change from 0 to 512 [ 295.352395][T10819] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 295.382767][T10819] EXT4-fs (loop7): orphan cleanup on readonly fs [ 295.393034][T10828] capability: warning: `syz.3.2106' uses deprecated v2 capabilities in a way that may be insecure [ 295.416748][T10819] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 295.433869][T10823] loop4: detected capacity change from 0 to 2048 [ 295.442160][T10819] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 295.458262][T10825] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.483871][T10828] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 295.516349][T10819] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 295.525131][T10824] Process accounting resumed [ 295.531429][T10819] EXT4-fs (loop7): 1 truncate cleaned up [ 295.554677][T10839] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2109'. [ 295.628958][T10845] loop4: detected capacity change from 0 to 512 [ 295.677317][T10848] FAULT_INJECTION: forcing a failure. [ 295.677317][T10848] name failslab, interval 1, probability 0, space 0, times 0 [ 295.690023][T10848] CPU: 1 UID: 0 PID: 10848 Comm: syz.5.2113 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 295.701954][T10848] Tainted: [W]=WARN [ 295.705758][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.715825][T10848] Call Trace: [ 295.719098][T10848] [ 295.722033][T10848] dump_stack_lvl+0xf2/0x150 [ 295.726636][T10848] dump_stack+0x15/0x20 [ 295.730802][T10848] should_fail_ex+0x223/0x230 [ 295.735495][T10848] should_failslab+0x8f/0xb0 [ 295.736990][T10846] loop2: detected capacity change from 0 to 512 [ 295.740084][T10848] kmem_cache_alloc_node_noprof+0x59/0x320 [ 295.752125][T10848] ? __alloc_skb+0x10b/0x310 [ 295.756758][T10848] __alloc_skb+0x10b/0x310 [ 295.761272][T10848] ? audit_log_start+0x34c/0x6b0 [ 295.766436][T10848] audit_log_start+0x368/0x6b0 [ 295.771223][T10848] audit_seccomp+0x4b/0x130 [ 295.775745][T10848] __seccomp_filter+0x6fa/0x1180 [ 295.780695][T10848] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 295.786401][T10848] ? vfs_write+0x596/0x920 [ 295.790850][T10848] __secure_computing+0x9f/0x1c0 [ 295.795792][T10848] syscall_trace_enter+0xd1/0x1f0 [ 295.800863][T10848] ? fpregs_assert_state_consistent+0x83/0xa0 [ 295.806994][T10848] do_syscall_64+0xaa/0x1c0 [ 295.811536][T10848] ? clear_bhb_loop+0x55/0xb0 [ 295.816320][T10848] ? clear_bhb_loop+0x55/0xb0 [ 295.821003][T10848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.826903][T10848] RIP: 0033:0x7f45e3540849 [ 295.831309][T10848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.850922][T10848] RSP: 002b:00007f45e1bb7058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 295.859369][T10848] RAX: ffffffffffffffda RBX: 00007f45e3705fa0 RCX: 00007f45e3540849 [ 295.867345][T10848] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 295.875345][T10848] RBP: 00007f45e1bb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 295.883353][T10848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.891317][T10848] R13: 0000000000000000 R14: 00007f45e3705fa0 R15: 00007ffcdb8914b8 [ 295.899314][T10848] [ 295.908898][T10846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.925283][T10845] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.943537][T10845] Process accounting resumed [ 295.984226][T10845] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 295.984757][T10846] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.038324][T10866] loop7: detected capacity change from 0 to 512 [ 296.054339][T10868] 1ªX¹¦À: renamed from 60ªX¹¦À [ 296.073769][T10868] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 296.150878][T10866] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.166956][T10866] Process accounting resumed [ 296.209258][T10885] loop4: detected capacity change from 0 to 512 [ 296.230141][T10866] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 296.250180][T10885] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 296.304209][T10885] EXT4-fs (loop4): orphan cleanup on readonly fs [ 296.354663][T10885] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 296.411366][T10885] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 296.441316][T10885] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 296.444188][T10898] loop7: detected capacity change from 0 to 512 [ 296.452021][T10885] EXT4-fs (loop4): 1 truncate cleaned up [ 296.524147][T10898] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.525401][T10906] FAULT_INJECTION: forcing a failure. [ 296.525401][T10906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.547737][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.5.2135 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 296.559670][T10906] Tainted: [W]=WARN [ 296.563478][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.573540][T10906] Call Trace: [ 296.576827][T10906] [ 296.579794][T10906] dump_stack_lvl+0xf2/0x150 [ 296.581037][T10898] Process accounting resumed [ 296.584470][T10906] dump_stack+0x15/0x20 [ 296.593236][T10906] should_fail_ex+0x223/0x230 [ 296.598042][T10906] should_fail+0xb/0x10 [ 296.602203][T10906] should_fail_usercopy+0x1a/0x20 [ 296.607305][T10906] _copy_from_user+0x1e/0xb0 [ 296.612033][T10906] copy_msghdr_from_user+0x54/0x2a0 [ 296.617303][T10906] ? __fget_files+0x17c/0x1c0 [ 296.621988][T10906] __sys_sendmsg+0x13e/0x230 [ 296.626597][T10906] __x64_sys_sendmsg+0x46/0x50 [ 296.631455][T10906] x64_sys_call+0x2734/0x2dc0 [ 296.636165][T10906] do_syscall_64+0xc9/0x1c0 [ 296.640734][T10906] ? clear_bhb_loop+0x55/0xb0 [ 296.645459][T10906] ? clear_bhb_loop+0x55/0xb0 [ 296.650162][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.656065][T10906] RIP: 0033:0x7f45e3540849 [ 296.660537][T10906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.680156][T10906] RSP: 002b:00007f45e1bb7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.688598][T10906] RAX: ffffffffffffffda RBX: 00007f45e3705fa0 RCX: 00007f45e3540849 [ 296.696606][T10906] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 296.704577][T10906] RBP: 00007f45e1bb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 296.712549][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.720549][T10906] R13: 0000000000000000 R14: 00007f45e3705fa0 R15: 00007ffcdb8914b8 [ 296.728534][T10906] [ 296.747567][T10898] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 296.811191][T10910] FAULT_INJECTION: forcing a failure. [ 296.811191][T10910] name failslab, interval 1, probability 0, space 0, times 0 [ 296.823966][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.4.2138 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 296.836021][T10910] Tainted: [W]=WARN [ 296.839819][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.849942][T10910] Call Trace: [ 296.853267][T10910] [ 296.856236][T10910] dump_stack_lvl+0xf2/0x150 [ 296.860909][T10910] dump_stack+0x15/0x20 [ 296.865155][T10910] should_fail_ex+0x223/0x230 [ 296.869917][T10910] should_failslab+0x8f/0xb0 [ 296.874517][T10910] kmem_cache_alloc_node_noprof+0x59/0x320 [ 296.880409][T10910] ? __alloc_skb+0x10b/0x310 [ 296.885095][T10910] __alloc_skb+0x10b/0x310 [ 296.889668][T10910] ? audit_log_start+0x34c/0x6b0 [ 296.894677][T10910] audit_log_start+0x368/0x6b0 [ 296.899450][T10910] audit_seccomp+0x4b/0x130 [ 296.903970][T10910] __seccomp_filter+0x6fa/0x1180 [ 296.908920][T10910] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 296.914561][T10910] ? vfs_write+0x596/0x920 [ 296.918979][T10910] ? __schedule+0x6fa/0x930 [ 296.923512][T10910] __secure_computing+0x9f/0x1c0 [ 296.928566][T10910] syscall_trace_enter+0xd1/0x1f0 [ 296.933586][T10910] do_syscall_64+0xaa/0x1c0 [ 296.938087][T10910] ? clear_bhb_loop+0x55/0xb0 [ 296.942757][T10910] ? clear_bhb_loop+0x55/0xb0 [ 296.947473][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.953427][T10910] RIP: 0033:0x7efc6c0af1b0 [ 296.957997][T10910] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 8f 02 00 8b 44 [ 296.977645][T10910] RSP: 002b:00007efc6a726f80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 296.986053][T10910] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efc6c0af1b0 [ 296.994015][T10910] RDX: 0000000000000000 RSI: 00007efc6c123a9e RDI: 00000000ffffff9c [ 297.001973][T10910] RBP: 00007efc6c123a9e R08: 0000000000000000 R09: 0000000000000000 [ 297.009999][T10910] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 297.018018][T10910] R13: 0000000000000000 R14: 00007efc6c275fa0 R15: 00007ffe84feada8 [ 297.025982][T10910] [ 297.216497][T10921] loop7: detected capacity change from 0 to 2048 [ 297.353040][T10946] Cannot find del_set index 0 as target [ 297.380269][T10946] loop5: detected capacity change from 0 to 2048 [ 297.428680][T10946] EXT4-fs: Ignoring removed i_version option [ 297.451725][T10946] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.569159][T10960] __nla_validate_parse: 3 callbacks suppressed [ 297.569183][T10960] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2157'. [ 297.570219][T10956] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2156'. [ 297.588028][T10960] loop3: detected capacity change from 0 to 2048 [ 297.689053][T10968] loop2: detected capacity change from 0 to 512 [ 297.698937][T10968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.743313][T10970] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2160'. [ 297.756674][T10970] 0ªX¹¦À: renamed from 61ªX¹¦À [ 297.764049][T10968] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.781139][T10970] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 297.810662][T10974] netlink: 763 bytes leftover after parsing attributes in process `syz.7.2161'. [ 297.843057][T10974] loop7: detected capacity change from 0 to 2048 [ 297.866071][T10946] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2153: bg 0: block 234: padding at end of block bitmap is not set [ 297.919226][T10946] EXT4-fs (loop5): Remounting filesystem read-only [ 297.971045][T10961] EXT4-fs (loop5): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 298.012305][T10983] loop2: detected capacity change from 0 to 512 [ 298.073296][T10983] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.104619][T10983] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 298.172655][T10982] Process accounting resumed [ 298.200751][T10992] loop4: detected capacity change from 0 to 512 [ 298.248007][T10992] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.308667][ T3362] ================================================================== [ 298.316759][ T3362] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 298.323764][ T3362] [ 298.326072][ T3362] read-write to 0xffff888237c2e8a4 of 4 bytes by task 3372 on cpu 0: [ 298.334107][ T3362] wq_worker_running+0x98/0x130 [ 298.338935][ T3362] schedule_timeout+0xb8/0x160 [ 298.343681][ T3362] wait_for_common+0xfb/0x1c0 [ 298.348332][ T3362] usb_start_wait_urb+0xdc/0x190 [ 298.353339][ T3362] usb_control_msg+0x182/0x240 [ 298.358084][ T3362] hub_ext_port_status+0xbf/0x480 [ 298.363092][ T3362] hub_event+0x538/0x2910 [ 298.367396][ T3362] process_scheduled_works+0x483/0x9a0 [ 298.372830][ T3362] worker_thread+0x51d/0x6f0 [ 298.377408][ T3362] kthread+0x1d1/0x210 [ 298.381453][ T3362] ret_from_fork+0x4b/0x60 [ 298.385848][ T3362] ret_from_fork_asm+0x1a/0x30 [ 298.390590][ T3362] [ 298.392893][ T3362] read to 0xffff888237c2e8a4 of 4 bytes by task 3362 on cpu 1: [ 298.400407][ T3362] kick_pool+0x4d/0x2c0 [ 298.404543][ T3362] __queue_work+0x8bb/0xb40 [ 298.409025][ T3362] queue_work_on+0xd3/0x180 [ 298.413509][ T3362] process_srcu+0x711/0xb00 [ 298.417994][ T3362] process_scheduled_works+0x483/0x9a0 [ 298.423427][ T3362] worker_thread+0x51d/0x6f0 [ 298.428081][ T3362] kthread+0x1d1/0x210 [ 298.432128][ T3362] ret_from_fork+0x4b/0x60 [ 298.436523][ T3362] ret_from_fork_asm+0x1a/0x30 [ 298.441263][ T3362] [ 298.443563][ T3362] value changed: 0x00000000 -> 0x00000001 [ 298.449252][ T3362] [ 298.451550][ T3362] Reported by Kernel Concurrency Sanitizer on: [ 298.457679][ T3362] CPU: 1 UID: 0 PID: 3362 Comm: kworker/1:2 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 298.469541][ T3362] Tainted: [W]=WARN [ 298.473321][ T3362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.483352][ T3362] Workqueue: rcu_gp process_srcu [ 298.488272][ T3362] ================================================================== [ 298.503988][T10992] Process accounting resumed [ 298.514307][T11002] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2171'. [ 298.544153][T10992] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 298.548723][T11000] syzkaller0: entered promiscuous mode [ 298.560067][T11000] syzkaller0: entered allmulticast mode